GreyNoise in the news

The latest news, announcements, and perspectives from GreyNoise.

Security Week

New Zyxel Zero-Day Under Attack, No Patch Available

Dark Reading

Unpatched Zyxel CPE Zero-Day Pummeled by Cyberattackers

gbhackers.

Zyxel CPE Zero-Day (CVE-2024-40891) Exploited in the Wild

Bleeping Computer

Hackers exploit critical unpatched flaw in Zyxel CPE devices

Help Net Security

Zyxel CPE devices under attack via critical vulnerability without a patch (CVE-2024-40891)

Cybersecurity Drive

Attackers exploit zero-day vulnerability in Zyxel CPE devices

The Hacker News

Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability

Murdoc Botnet Exploiting AVTECH Cameras & Huawei Routers To Gain Complete Control

Recorded Future

Cleo MFT: CVE-2024-50623

Reddit

Unpacking the Diicot Malware Targeting Linux Environments

Reddit

Exploring Spring Boot Actuator Misconfigurations

SOC Radar

FortiGate Firewall Configs Dumped: Revisiting CVE-2022-40684 Exploitation

Greenbone

December 2024 Threat Report: Sunsetting a Record Year for IT Risk

Security Week

GFI KerioControl Firewall Vulnerability Exploited in the Wild

SOC Radar

Ivanti Zero-Day Exploited in Connect Secure, SonicWall SSL VPN and SSH Vulnerabilities, KerioControl Flaw

Bleeping Computer

Hackers exploit KerioControl firewall flaw to steal admin CSRF tokens

Cybernoz

Threat actors attempt to exploit a flaw in Four-Faith routers

Security Affairs

Threat actors attempt to exploit a flaw in Four-Faith routers

Kowatek

15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials

The Hacker News

15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials

AI Zero Days Are Here: What CISOs Need to Know

Censys

December 17 Advisory: PoC Exploit Available for Mitel MiCollab VoIP Platform [CVE-2024-35286, CVE-2024-41713, CVE-2024-55550]

Cyberwire

Watching the watchers. IoT vulnerabilities exposed by AI.

Government Technology Insider

Holistic Vulnerability Management: The Critical Trio of Asset Management, Threat Intelligence, and Dynamic Vulnerability Assessment