GreyNoise in the news

The latest news, announcements, and perspectives from GreyNoise.

Security Affairs

U.S. CISA adds AMI MegaRAC SPx, D-Link DIR-859 routers, and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog

Surge in Attacks Targeting MOVEit Transfer Systems – 100+ Unique IPs Used by Attackers

GBHackers

MOVEit Transfer Systems Hit by Wave of Attacks Using Over 100 Unique IPs

Zyxel Devices Hit by Active Exploits Targeting CVE-2023-28771 Vulnerability

Loginsoft

This Week in Cybersecurity: Critical Exploits, Expanding Botnets, and Sophisticated Threat Campaigns

SC Media

Intrusions involving TP-Link router, Zyxel firewall flaws underway

Cybersecurity Help

Zyxel and TP-Link bugs increasingly exploited by malicious actors

The IT Nerd

Critical Zyxel Vulnerability Is Being Actively Exploited

OpenText

Attackers target Zyxel RCE vulnerability CVE-2023-28771

Cyber Press

Hackers Actively Exploit Zyxel RCE Vulnerability Through UDP Port

SecurityWeek

Zyxel Firewall Vulnerability Again in Attacker Crosshairs

Cybersecurity Dive

Critical Zyxel vulnerability under active exploitation after long period of quiet

Critical Zyxel vulnerability under active exploitation after long period of quiet

Security Affairs

Attackers target Zyxel RCE vulnerability CVE-2023-28771

CISO2CISO.COM

Attackers target Zyxel RCE vulnerability CVE-2023-28771

BeyondMachines

Coordinated cyberattacks target two years old Zyxel firewall flaw

Hackers Actively Exploiting Zyxel RCE Vulnerability Via UDP Port

Daily CyberSecurity

Zyxel Firewalls Under Attack via Critical CVE-2023-28771

GBHackers Security

Zyxel Devices Under Attack as Hackers Exploit UDP Port RCE Flaw

CyberMaterial

Coordinated Brute Force Hits Tomcat Manager

Daily Cybersecurity

Apache Tomcat Under Attack: Massive Brute-Force Campaign Targets Manager Interfaces

Cybersecurity Help

Coordinated brute-force campaign targets Apache Tomcat Manager interfaces

Cyber Press

Apache Tomcat Manager Under Attack by 400 Unique IP Addresses

Hackers Attacking Apache Tomcat Manager From 400 Unique IPs