NoiseLetter March 2024

March seemed to have passed by in a flash, filled with events, webinars, and exciting updates from our labs team, who released an astounding 43 new tags this month. We are thrilled to share our latest content and upcoming plans for the next month.

Andrew Unfiltered

GreyNoise Founder Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

‍

Where to find us

• NetNoiseCon (Virtual | April 19) NetNoiseCon is an online livestream conference featuring technical and career-focused talks presented by members of the GreyNoise community, the GreyNoise team, and other InfoSec experts.
• RSA (In-Person | San Francisco, CA | May 6-9) While GreyNoise will not be a sponsor at this years event we will be around and would love to meet up in the bay area.‍
• FS-ISAC EMEA Summit (In-Person| Berlin, Germany | May 21-23 ) We are very excited to be participating in this years EMEA Summit. If you want to meet up with the team for a demo or a beer hit up abigail@greynoise.io.

Fresh Content

• Report: Honeypots Are Back
• Webinar: Future of Honeypots
• Blog:  Anatomy of a GreyNoise Tag
• Blog: Hunting for Fortinet's CVE-2024-21762
• Blog: Where are they now? Starring: Atlassian's Confluence CVE-2023-22527
• Blog: What We're Reading - March 2024

Newly Released Tags

GreyNoise Labs released 43 tags during the month of March.

• Tenda AC18 CVE-2024-2854 RCE Attempt
• Joomla facileforms Arbitrary File Upload Attempt
• Joomla JBcatalog Arbitrary File Upload Attempt
• Joomla JBcatalog Arbitrary File Upload Vuln Check
• Jenkins Build-Metrics 1.3 CVE-2019-10475 XSS Attempt
• Well-Known Scanner
• Dell SonicWALL Scrutinizer methodDetail SQL Injection Attempt
• Fortra FileCatalyst Workflow Web Portal Scanner
• Schuhfried Testing Platform CVE-2023-38995 Info Leak Attempt
• Web.xml Access Attempt
• Joomla Com_Fabrik Arbitrary File Upload Attempt
• osCommerce 2.2 RCE Attempt
• NextChat CVE-2023-49785 SSRF Attempt
• WP-22.php Malware Scanner
• Hikvision IP Cameras CVE-2013-4975 Privilege Escalation Check
• Terramaster TOS RCE Attempt
• Hikvision Intercom Broadcasting System CVE-2023-6895 Command Injection Attempt
• ECOA BAS Controller CVE-2021-41293 Path Traversal Attempt
• Weaver E-Cology E-mobile SQL Injection Attempt
• FortiNet FortiClientEMS CVE-2023-48788 SQL Injection Attempt
• Oracle BI Publisher CVE-2019-2588 Directory Traversal Attempt
• Cisco ASA CVE-2020-3259 Information Disclosure Attempt
• Hongfan OA ioAssistance.asmx RCE Attempt
• Ecology OA validate.jsp SQL Injection Attempt
• PhpMyAdmin setup.php Remote Command Execution Check
• HD-Network Real-time Monitoring System CVE-2021-45043 Path Traversal Attempt
• Western Digital My Cloud Command Injection RCE Attempt
• CloudPanel 2 CVE-2023-35885 RCE Attempt
• CloudPanel 2 CVE-2023-35885 Vuln Check
• Nacos CVE-2021-29441 Vuln Check
• Nacos CVE-2021-29441 Backdoor Attempt
• SystemBC Scanner
• Wordpress KiviCare CVE-2022-0786 SQL Injection Attempt
• Discuz Command Injection RCE Attempt
• ZhongYuan iAudit Command Injection RCE Attempt
• IBM BigFix scanner
• TeamCity JetBrain CVE-2024-27199 Auth Bypass Attempt
• Fortinet FortiOS FortiProxy RCE CVE-2024-21762 Attempt
• TeamCity JetBrain CVE-2024-27198 Auth Bypass Attempt
• Juniper SRX / EX Series Buffer Overflow Attempt
• Apache Solr File Upload Attempt
• Readme Scanner

Community

• Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team. 
• ‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
• ‍Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke. 

Joke of the Month

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

‍

Not subscribed to our NoiseLetter? Subscribe here.

‍

‍

‍