NoiseLetter - May 2023

Summary

Welcome to our May NoiseLetter, the monthly GreyNoise newsletter where we keep you up to date on all things GreyNoise.

Andrew Unfiltered

GreyNoise CEO Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

Product Announcements

Customer-Deployed Sensors

We are in the early discovery phase for our new customer-deployed sensors. With GreyNoise Sensors and the GreyNoise platform users can identify attacks that are targeting them or networks that look like them, collect PCAP and netflow from a wide range of applications to use in threat research, and more. If you're interested in being a part of our early access program email sensors_early_access@greynoise.io.

Fresh Content

Storm Watch

NEW! Weekly Livestream

Every Monday | 9:30am CT / 10:30am ET

During this weekly livestream boB and Glenn cover the past weeks top vulnerabilities as well as what emerging threats to keep an eye on this week. Streaming on LinkedIn, Youtube, Twitter and Twitch.

Where to find us

‍GreyNoise 101 +201 (Virtual) During the first 30 min you will gain a base level understanding of GreyNoise.201 will be the second 30min where you'll see more advanced use cases.‍
Open Forum V: Forum Strikes Back (Virtual) Join our bi-annual “town hall” style meeting on June 8th to engage with the GreyNoise team, learn more about our products and get all of your questions answered.‍
Threat Hunting Webinar (OnDemand) Take a deep dive into automated threat hunting, investigating DDOS activity, & enhancing threat intel reports.‍
Splunk + GreyNoise Webinar (Virtual) Join us on June 15th to discover how leveraging GreyNoise + Splunk can to enhance your security operations.‍
HushCon 2023 (In-Person) Attention NYC! GreyNoise will be attending and hosting an official happy hour event at HushCon June 9th-10th.‍
InfoSec Europe Conference (In-Person) We are excited to announce that GreyNoise will be sponsoring (booth #D70) InfoSec Europe June 21st-23rd.‍
GayNoise Community Meeting (Virtual) Join the GreyNoise LGBT ERG on June 29th to learn about everything the team has accomplished during Pride Month!‍
.conf - Splunk > (In-Person) If you are attending the conference or plan to be in the Las Vegas area from July 17th - 20th, we'd love to meet up!

Newly Released Tags

GreyNoise researchers released 24 tags during the month of May:

2023-05-01: Sophos Web Appliance RCE Attempt
2023-05-01: Solarview Compact 6 RCE Attempt
2023-05-01: JexBoss Backdoor Check
2023-05-01: Nessus Scanner
2023-05-01: TRENDnet TEW-652BRP RCE Attempt
2023-05-02: Apache Superset Authentication Bypass Attempt
2023-05-02: Arris TR3300 RCE Attempt
2023-05-02: D-Link DWL-2600AP RCE Attempt
2023-05-02: Tenda AX3 RCE Attempt
2023-05-05: SOCRadar
2023-05-05: Open Port Statistics
2023-05-08: Nacos No Auth Scanner
2023-05-09: Apache Solr Admin Panel RCE Attempt
2023-05-11: Malware Patrol
2023-05-11: Ruckus Wireless Admin RCE Attempt
2023-05-19: WordPress Advanced Custom Fields XSS Attempt
2023-05-23: Sophos Mobile XXE Attempt
2023-05-24: SecurePoint UTM Auth Bypass Attempt
2023-05-25: Roxy-WI RCE Attempt
2023-05-25: Pentaho Business Analytics Server RCE Attempt
2023-05-27: Tenda RCE Attempt
2023-05-27: Zyxel RCE Attempt
2023-05-27: DCBI Netlog LAB RCE Attempt
2023-05-27: LB-LINK RCE Attempt

Joke of the Month

Why did the cryptographer send back his breakfast?

Because the hash wasn’t salted.

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Connect with us

‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan. Sign-Up >>
‍Join our Community Slack - We share intel, give real time updates, and the occasional Dad joke. Join Now >>
‍Talk to a Human - Talk to an expert from the GreyNoise team to see how we can help your organization. Learn More >>

‍