NoiseLetter - March 2023

Welcome to our March NoiseLetter, the monthly GreyNoise newsletter where we keep you up to date on all things GreyNoise.

Andrew's Soap Box

GreyNoise CEO Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

Product Announcements

Feature Updates

IP Similarity Update - With this update, we have made improvements to the visualizations and overall user experience of the IP Similarity feature to provide more meaningful results. IP Similarity is available to users who have purchased the feature atop their existing enterprise subscription, or to free users via our free trial. You can sign up for a free account here, and then navigate to the account section to sign up for a free trial.

Integration Updates

• Cribl - [NEW] Use GreyNoise insights within Cribl to funnel and store your logs in a way that optimizes for better detections, lower bills and faster decisions.
• MISP - Now allows you to use the Event level "enrich" function to return GreyNoise data from the module.
• Maltego - Now includes a new transform to support our IP Similarity functionality.

Fresh Content

• Blog: Don't Let Your Team Drown in Netflow
  
• Blog: Debugging D-Link - Emulating firmware and hacking hardware
• Blog: A Week in the Life of a GreyNoise Sensor - It's All About the Tags
• Blog: How we Built IP Similarity
• Blog: OpenAI, MinIO, and Why You Should Always Use docker-cli-scan To Keep Your Supply chAIn Clean

In The News

The Globee: GreyNoise NAMED one of the 19th Annual 2023 Globee® Cybersecurity Awards winners Read More >>

SecurityWeek: ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exploitation Read More >>

CSO: CISA kicks off ransomware vulnerability pilot to help spot ransomware-exploitable flaws Read More >>

Where to find us

GreyNoise 101

(Virtual) This is a 30 minute session to gain a base level understanding of GreyNoise. Learn More >>

GreyNoise 201

(Virtual) Want to see more advanced use cases and features?  Then GreyNoise 201s for you. Learn More >>

London Meet-Up

(In-person) We are crossing the pond to meet with London's security professionals for a casual networking event. Learn More >>

TechNet Cyber Conference

(In-person) GreyNoise is a sponsor at this years event and would love to meet up with you.  Follow the link to learn more. Learn More >>

Newly Released Tags

GreyNoise researchers released 23 tags during the month of March:

• Netgear Orbi Satellite RBS750 ubus RCE
• IBAX go-ibax SQLi Attempt
• APsystems Altenergy Power Control Software RCE Attempt
• Dahua Auth Bypass
• Wavlink CVE-2020-13117 RCE Attempt
• Nagios XI RCE Attempt
• Oracle WebLogic CVE-2023-21839 RCE Attempt
• Zoho ManageEngine ADSelfService Plus CVE-2022-28810 RCE Attempt
• D-Link CVE-2022-41140 RCE Attempt
• D-Link CVE-2023-24762 RCE Attempt
• GLPI Remote Code Execution Attempt
• University of California San Diego
• Plex Media Server Unpickle RCE Attempt
• Wordpress Enumeration
• Wavlink ExportAllSettings.sh RCE Attempt
• D-Link DIR-816L Information Disclosure Attempt
• GLPI Information Disclosure Attempt
• InfluxDB Authentication Bypass Attempt
• Minio Information Disclosure Attempt
• ZK Framework Information Disclosure Attempt
• Splunk Information Disclosure Attempt
• KubeView Information Disclosure Attempt
• Netgear Orbi Router RBS750 Access Control RCE

Joke of the Month

 Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Connect with us

• ‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan. Sign-Up >>
• ‍Join our Community Slack - We share intel, give real time updates, and the occasional Dad joke. Join Now >>
• ‍Talk to a Human - Talk to an expert from the GreyNoise team to see how we can help your organization. Learn More >>

‍