GreyNoise in the news

The latest news, announcements, and perspectives from GreyNoise.

Channel E2E

Active Exploitation of Years-old ThinkPHP, ownCloud Bugs Spike

SC Media

Palo Alto Networks PAN-OS flaw risks authentication bypass

The Hacker News

Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software

Hackers Exploiting ThinkPHP & ownCloud Vulnerabilities at Large Scale

Security Week

Exploitation of Old ThinkPHP, OwnCloud Vulnerabilities Surges

gbhackers.

Widespread Exploitation of ThinkPHP and OwnCloud Flaws by Cybercriminals

bleeping computer

Surge in attacks exploiting old ThinkPHP and ownCloud flaws

Security Affairs

U.S. CISA adds Microsoft Windows, Zyxel device flaws to its Known Exploited Vulnerabilities catalog

CSO

Over 12,000 KerioControl firewalls remain prone to RCE attacks amid active exploits

bleeping computer

Over 12,000 KerioControl firewalls exposed to exploited RCE flaw

Zyxel says it won’t patch security flaws in its old routers

The iBulletin

Zyxel Warns of Actively Exploited Flaws in CPE Series Devices, Offers No Fixes

If you own these Zyxel devices uninstall them now: No fix is coming

If you own these Zyxel devices uninstall them now: No fix is coming

TechTarget

Zyxel won't patch end-of-life routers against zero-day attacks

Security Week

Zyxel Issues ‘No Patch’ Warning for Exploited Zero-Days

TechCrunch

Router maker Zyxel tells customers to replace vulnerable hardware exploited by hackers

IT Security News

Critical Zero-Day Vulnerability in Zyxel Devices Sparks Widespread Exploitation

VulnCheck

Zyxel Telnet Vulnerabilities

Cybersecurity Dive

Exploitation of vulnerability in Zyxel CPE targets legacy routers

Risky Bulletin

Risky Bulletin: Authorities seize Cracked and Nulled cybercrime forums

Login Soft

Zero-Days, Active Exploits, and Botnets: Key Cybersecurity risks of the week

TachNadu

Critical Zyxel Zero-Day (CVE-2024-40891) Actively Exploited by Mirai Botnet Variants

Channel E2E

Zyxel Zero-Day Flaw Actively Exploited In The Wild

Bank Info Security

Breach Roundup: DeepSeek Leaked Sensitive Data