NoiseLetter February 2024

February has been really exciting with some big news! (Scroll down to see what it is.) Also, our extraordinary labs team has been tirelessly at it, unveiling a remarkable 33 new tags this month alone. Check out what we've been up to and get a sneak peek at what's coming next.

Andrew Unfiltered

GreyNoise Founder & Chief Architect Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

‍

Announcements

GreyNoise Intelligence is excited to announce the appointment of Ash Devata as its new CEO, as founder Andrew Morris transitions to the role of Chief Architect. With Devata's extensive experience in cybersecurity, GreyNoise looks forward to leveraging his expertise in product leadership to drive innovation and growth. Check out Andrew's blog or our recent press release to learn more.

Where to find us

• FS-ISAC Americas Summit (In-Person| San Diego, CA | March 3-6) This year's theme is Thriving Together in a Dynamic World. This year's theme is Thriving Together in a Dynamic World. If you want to meet up with the team for a demo or a beer hit up abigail@greynoise.io.
• Storm Watch | Cybersecurity Podcast (Every Tuesday, 10:30am ET / 9:30am CT) Our goal is simple: to deliver insightful analyses, thought-provoking perspectives, timely updates and the occasional hot-take on the ever-evolving cybersecurity landscape.

Fresh Content

• Webinar Replay: GreyNoise Open Forum VI
• Report: 2023 Internet Exploitation Retrospective
• Blog: Battling Ransomware One Tag At A Time
• Blog: Practical Vulnerability Archaeology Starring Ivanti's CVE-2021-44529
• Blog: Governments Have Zero Reason To Be Flipping Mad About Open Source SDR Tech
• Blog: What We're Reading - February 2024
  

Newly Released Tags

GreyNoise Labs released 33 tags during the month of February.

• Joomla Connect Back RCE Attempt
• Yunabao Cloud Box FastJson RCE Attempt
• WordPress Revslider Arbitrary File Upload Attempt
• pyspider unauthorized access rce attempt
• QNAP QTS Command Injection CVE-2023-47218 Attempt
• FCKeditor File Upload Scanning
• Apache Archiva Scanner
• ConnectWise ScreenConnect Auth Bypass Check
• Microweber XSS Attempt
• Androxgh0st
• Spring OAuth Template Injection RCE Attempt
• Tongda OA RCE Attempt
• WordPress InPost Local File Inclusion Attempt
• Parks Fiberlink 210 CVE-2023-33617 Attempt
• Horde CVE-2012-0209 RCE Attempt
• eXtplorer Authentication Bypass Attempt
• Jupyter Notebook Scanner
• Ivanti Connect Secure XXE CVE-2024-22024 Attempt
• Nmap phpMyAdmin Local File Inclusion Attempt
• Ivanti Connect Secure SSRF CVE-2024-21893 Attempt
• Graphite Web CVE-2013-5093 RCE Attempt
• WordPress Bricks Builder RCE Attempt
• MobileCartly RCE Attempt
• Sugar CRM Crawler
• jeecg-boot SQL Injection Attempt
• ConnectWise ScreenConnect Auth Bypass RCE Attempt
• IBM Maximo Asset Management Information Disclosure Attempt
• Hadoop Scanner
• HP SiteScope issueSiebelCmd RCE Attempt
• MagnusBilling Command Injection RCE Attempt
• Wordpress SupportCandy SQLi Attempt
• WordPress WP Visitor Statistics SQL Injection Attempt
• Common Gateway Interface /cgi-bin/ crawler

Community

• Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team. 
• ‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
• ‍Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke. 
• Join the GreyNoise Team - Help develop the next generation of internet intelligence products. GreyNoise culture is rooted in transparency, communication, and community. We believe these core tenets enable diversity, equity, and inclusion. Check out our current openings.

Joke of the Month

‍

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

‍

Not subscribed to our NoiseLetter? Subscribe here.

‍

‍