NoiseLetter - November 2023

We are excited to share all the incredible things we have been working on. From sponsoring CYBERWARCON to creating 17 new tags, researching multiple new vulnerabilities, and releasing a new integration, our team has been incredibly busy. Discover what we've been up to and get a sneak peek into what's coming up next in this month's NoiseLetter.

Andrew Unfiltered

GreyNoise CEO Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

Announcements

New Integration

GreyNoise has recently released a new integration for Microsoft Sentinel, enhancing the capabilities of threat intelligence for business security. Learn More >>

Storm Watch - Weekly Livestream and Podcast

Storm Watch is a livestream hosted by the GreyNoise team, where we dive into recent vulnerabilities, emerging threats, and so much more. It all began with a video livestream in May, and now we are thrilled to announce that we have also released it as a podcast. Tune in every Tuesday at 9:30am CT / 10:30am ET to watch or listen. We would absolutely love for you to join us, whether it's to heckle our hosts, share your thoughts, or simply stay up to date with all things cybersecurity.  Learn More >>

12 Days of Tagmas - GreyNoise Tagvent Calendar

Each day we will share details about how a tag was discovered, long term impacts, and why/if defenders should still be concerned. There will also be a few surprises along the way. Learn More >>

Where to find us

• ‍GreyNoise 101 +201 (Virtual | Thursday, Nov. 30th) This 1-hour session is perfect for anyone new to GreyNoise and interested in learning how to use the platform. In the first 30 minutes, we'll cover the basics and give you a solid foundation. Stick around for the last 30 minutes to dive into more advanced use cases. Don't miss this opportunity to level up your GreyNoise skills.
• DoDIIs Conference (In-Person | Portland, OR | Dec. 12-14) GreyNoise will be sponsoring DoDIIs again this year! If you are going to be at this event swing by Booth #852 for some awesome swag or schedule 1:1 time to get a demo and chat with the team.
• Sift Webinar (Virtual | Thursday, Dec. 14) Sift is a GreyNoise Intelligence application that uses advanced AI/ML to help Threat Intelligence Analysts and Detection Engineers stay ahead of emerging threats.

Fresh Content

• Blog: Getting A Leg Up On Initial Access Ransomware With CISA KEV and GreyNoise Tags
• Blog: Unveiling the Deceptive World: Honeypots vs Honeytokens
  
• Blog: Quickly Triaging HTTP Traffic From GreyNoise’s New Hosted Sensors
• Video: Weekly Livestream - Storm Watch
  
• eBook: GreyNoise 2023 Guide to Threat Hunting
• OnDemand Webinar:  Stay Ahead of Cyber Threats with GreyNoise
• Country Reports:  Attackers Without Borders

Recent Vulnerabilities

• CVE-2023-49103: ownCloud
• CVE-2023-29552: Service Location Protocol (SLP)
• View All Recent Tags >>

Newly Released Tags

GreyNoise Labs released 17 tags during the month of November

• 2023-11-27 — ownCloud Graph API Information Disclosure
• 2023-11-22 — Movable Type mt-upgrade.cgi RCE Attempt
• 2023-11-22 — 74CMS SQL Injection Attempt
• 2023-11-21 — MantisBT SOAP API Version Check
• 2023-11-20 — Zemra Botnet CnC Web Panel RCE Attempt
• 2023-11-20 — CrushFTP RCE Attempt
• 2023-11-17 — Oracle WebLogic CVE-2014-4210 SSRF Attempt
• 2023-11-15 — rConfig SQL Injection Attempt
• 2023-11-14 — FSMLabs TimeKeeper RCE Attempt
• 2023-11-13 — SysAid ITIL Anonymous User Registration Attempt
• 2023-11-11 — favicon.ico Scanner
• 2023-11-08 — SLP (Service Location Protocol) Scanner
• 2023-11-07 — phpDocumentor RCE Check
• 2023-11-06 — Seowon SLC-130 SLR-120S RCE Attempt
• 2023-11-03 — Atlassian Confluence Server Authentication Bypass Attempt
• 2023-11-02 — Apache ActiveMQ RCE Attempt
• 2023-11-01 — Beanshell Command Injection Attempt

Joke of the Month

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Community

• Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team. 
• ‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
• ‍Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke. 
• Join the GreyNoise Team - Help develop the next generation of internet intelligence products. GreyNoise culture is rooted in transparency, communication, and community. We believe these core tenets enable diversity, equity, and inclusion. Check out our current openings.

‍

Not subscribed to our NoiseLetter? Subscribe here.

‍

‍