NoiseLetter - September 2023

Summary

We've had a fantastic and action-packed month at GreyNoise. From participating in events like LABSCON and 44Con to hosting webinars and publishing in-depth reports on malicious traffic by country, we've been busy. Be sure to check out our September NoiseLetter to stay updated on all things GreyNoise and discover what we have planned for the upcoming months. Thanks again for being part of the GreyNoise Community!

Andrew Unfiltered

GreyNoise CEO Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

Announcements

Storm Watch - Weekly Livestream and Podcast

Storm Watch is a livestream hosted by the GreyNoise team, where we dive into recent vulnerabilities, emerging threats, and so much more. It all began with a video livestream in May, and now we are thrilled to announce that we have also released it as a podcast (we have 17 episodes already!). Tune in every Tuesday at 9:30am CT / 10:30am ET to watch or listen. We would absolutely love for you to join us, whether it's to heckle our hosts, share your thoughts, or simply stay up to date with all things cybersecurity. Learn More >>

Where to find us

‍GreyNoise 101 +201 (Virtual | Today, Sept. 28th) This 1-hour session is perfect for anyone new to GreyNoise and interested in learning how to use the platform. In the first 30 minutes, we'll cover the basics and give you a solid foundation. Stick around for the last 30 minutes to dive into more advanced use cases. Don't miss this opportunity to level up your GreyNoise skills.‍
FS-ISAC 2023 FinCyber Today Summit (In-Person | Orlando, FL | Oct. 1-4) GreyNoise is thrilled to be a sponsor at this year's FinCyber Today Summit organized by FS-ISAC. If you are attending the event, we would love for you to visit us at booth #5! We have some fantastic swag and even a chance to win a PS5. If you would like to schedule a demo and have some one-on-one time with our team, please click the link below to make a request.

Fresh Content

New Country Reports: Attackers Without Borders: The United Kingdom View of Global Malicious Traffic (more countries coming soon!)
OnDemand Webinar: How MSSPs Can Leverage Automation to Reduce Alerts & Maximize their Analysts
Blog: Welcome to GreyNoise Labs!
Blog: MSSPs' Playbook for Success: Balancing Automation and Human Expertise
Blog: Data Science-Fueled Tagging From GreyNoise
eBook: GreyNoise 2023 Guide to Threat Hunting

Newly Released Tags

GreyNoise Labs released 15 tags during the month of August:

2023-09-26 — Qlik Sense HTTP Tunneling Attempt
2023-09-26 — Qlik Sense Auth Bypass Attempt
2023-09-25 — GeoServer Scanner
2023-09-20 — Apache Roller OGNL Injection Attempt
2023-09-20 — Cisco CVE-2020-3187 Scanner
2023-09-19 — Horde Path Traversal Attempt
2023-09-19 — jQuery-File-Upload Attempt
2023-09-19 — phpThumb fltr RCE Attempt
2023-09-14 — Anonymous Fox Scanner
2023-09-13 — Jira XSS Attempt
2023-09-11 — PHP Backdoor Script Scanner
2023-09-11 — Alfa Shell Attempt
2023-09-07 — FiveM Information Disclosure Attempt
2023-09-07 — Unrestricted Siemens S7 Series Scanner
2023-09-06 — Apache RocketMQ RCE Attempt
2023-09-06 — WordPress Site Editor LFI Attempt
2023-09-06 — Helpdesk Pro Directory Traversal Attempt

Joke of the Month

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Community

Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team.
‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
‍Join our Community Slack - We share intel, give real time updates, and the occasional Dad joke.
‍Talk to a Human - Talk to an expert from the GreyNoise team to see how we can help your organization.
Join the GreyNoise Team - Help develop the next generation of internet intelligence products. GreyNoise culture is rooted in transparency, communication, and community. We believe these core tenets enable diversity, equity, and inclusion. Check out our current openings.

‍

Not subscribed to our NoiseLetter? Subscribe here.

‍