GreyNoise in the news

The latest news, announcements, and perspectives from GreyNoise.

Authentication bypass vulnerabilities in TeamCity: everything you need to know

Sonatype

The curious case of 'csrf-magic': A case study in supply chain poisoning

ConnectWise ScreenConnect: Authentication Bypass Deep Dive

PWN Defend

Some Useful Threat Analysis Tools

Sapphire Ventures

Silicon Valley Meets The Department of Defense: Top Observations & Opportunities in Defense Tech

Help Net Security

Akira, LockBit actively searching for vulnerable Cisco ASA devices

Is your cloud security strategy ready for LLMs?

Zero-day Vulnerability – Examples, Detection & Prevention

Let's revisit the Ivanti Connect Secure clusterfudge

CISA orders Ivanti devices targeted by Chinese hackers be disconnected

Security Week

45,000 Exposed Jenkins Instances Found Amid Reports of In-the-Wild Exploitation

Bleeping Computer

Ivanti warns of new Connect Secure zero-day exploited in attacks

HelpNetSecurity

PoC for easily exploitable Fortra GoAnywhere MFT vulnerability released (CVE-2024-0204)

Atlassian Confluence Data Center under active exploitation in older versions

Atlassian Confluence Servers Attacked From 600+ IP Addresses

Bleeping Computer

Ivanti: VPN appliances vulnerable if pushing configs after mitigation

Atlassian Confluence Server RCE attacks underway from 600+ IPs

CISA issues emergency directive for federal agencies to patch Ivanti VPN vulnerabilities

Bleeping Computer

CISA emergency directive: Mitigate Ivanti zero-days immediately

The Record

Ivanti vulnerabilities are being exploited widely, CISA says in emergency directive

AssetNote

High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE

CISA posts incident response guide for water utilities

The Hacker News

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

The Cybersecurity News

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems