GreyNoise in the news

The latest news, announcements, and perspectives from GreyNoise.

Solomon on Cybersecurity

Warning to admins running PaloAlto Networks' GlobalProtect

SC Media

Active exploitation of Sitecore, Next.js, DrayTek vulnerabilities ongoing

Bank Info Security

Breach Roundup: Signal Is Safe

Blackbox Security

CISA Alerts on Sitecore RCE Vulnerabilities; Ongoing Exploits Target Next.js and DrayTek Devices

Daily CyberSecurity

Mass Reboots and Exploit Attempts Plague DrayTek Routers Across the Globe

The Hacker News

CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek Devices

DrayTek Routers Vulnerability Exploited in the Wild

DrayTek routers face active exploitation of older vulnerabilities

Cybersecurity Dive

DrayTek routers face active exploitation of older vulnerabilities

DrayTek Routers Vulnerability Exploited in the Wild – Possibly Links to Reboot Loop

GBHackers

DrayTek Router Vulnerability Exploited in the Wild – Linked to Reboot Loop Issue

Cyberdaily.au

Active exploitation of DrayTek router vulnerabilities underway in the wild

CSO Online

Rising attack exposure, threat sophistication spur interest in detection engineering

SecurityWeek

Vulnerability Exploitation Possibly Behind Widespread DrayTek Router Reboots

Critical Apache Tomcat RCE vulnerability exploited

Cybersecurity Dive

Critical Apache Tomcat RCE vulnerability exploited

SOC Prime

CVE-2025-24813 Detection: Apache Tomcat RCE Vulnerability Actively Exploited in the Wild

SC Media

Attacks involving ServiceNow vulnerabilities escalate

ChannelE2E

Attacks Involving ServiceNow Flaws Escalate

TechRadar

Hackers are targeting unpatched ServiceNow instances that exploit 3 separate year-old vulnerabilities

Hackread

ServiceNow vulnerability alert: Hackers are actively exploiting year-old flaws (CVE-2024-4879, CVE-2024-5217, CVE-2024-5178) for database access. Learn how to protect your systems.

ITPro

Old ServiceNow vulnerabilities could cause havoc for unpatched customers

Hackers Are Actively Exploiting Apache Tomcat Servers – Patch Now!

GBHackers

Hackers Actively Exploit Apache Tomcat Servers via CVE-2025-24813 – Patch Now