GreyNoise in the news

The latest news, announcements, and perspectives from GreyNoise.

Massive Iran-Linked Botnet Exploiting Security Cameras for DDoS Attacks

SC Media

Over 86K devices impacted by novel global Eleven11bot botnet

Cybersecurity Dive

More than 86K IoT devices compromised by fast-growing Eleven11 botnet

Cybernews

Eleven11bot botnet is nearly three times bigger than initial estimates

Bleeping Computer

New Eleven11bot botnet infects 86,000 devices for DDoS attacks

CSO Online

Ransomware access playbook: What Black Basta’s leaked logs reveal

Large cyberattack emanated from Iran days after Trump sanctions - watchdogs

Attackers Automating Vulnerability Exploits with Few Hours of Disclosure

DDoS - Eleven11bot Activity

Cybersecurity Dive

Massive Iran-linked botnet launches DDoS attacks against telecom, gaming platforms

Ransomware criminals love CISA's KEV list – and that's a bug, not a feature

Infosecurity Magazine

Old Vulnerabilities Among the Most Widely Exploited

U.S. Army

AvengerCon IX returns to the Augusta Georgia Cyber Center

23 Vulnerabilities in Black Basta’s Chat Logs Exploited in the Wild, Including PAN-OS, Cisco IOS, & Exchange

N2K CyberWire

No click, all tricks.

The Hacker News

Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal Conflicts

GBHackers

Threat Actors Using Ephemeral Port 60102 for Covert Malware Communications

The Hacker News

Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA

100+ Malicious IPs Actively Exploiting Vulnerabilities in Cisco Devices

Cybersecurity Dive

Attackers exploiting Cisco vulnerabilities tied to Salt Typhoon campaign

SecurityWeek

Second Recently Patched Flaw Exploited to Hack Palo Alto Firewalls

SOCRadar

Top 10 Best Free Cyber Threat Intelligence Sources and Tools in 2025

Google Released PoC Exploit For Palo Alto Firewall Command Injection Vulnerability

PAN-PAN-PAN-OS: Palo Alto Firewalls Under Attack (Again)