NoiseLetter September 2025

Summary

Welcome back to the NoiseLetter, fashionably late edition! 💅 Sorry for the delay, but we were busy hanging with the team at our company offsite! Now we're back with exciting updates: our new GreyNoise MCP Server launch, insights on Cisco ASA zero-day scanning and VPN brute force attacks, plus upcoming events where you can catch us live. Let's get into it!

Bob Unfiltered

VP of Data Science + Research, Bob Rudis, creatively gives his thoughts, hot-takes, and whatever else he feels like.

Featured

GreyNoise Launches MCP Server for AI Security Agents

GreyNoise's new MCP Server lets AI agents query threat intelligence in real time, distinguishing benign scanners from actual threats. This enables smarter alert triage, vulnerability prioritization, and incident response while reducing false positives.

Security teams can also use it with LLM tools like Claude to quickly generate intelligence reports and analyze threat trends. It's not about replacing analysts—it's about giving AI agents the same noise-filtering capabilities SOC teams already rely on for more reliable automation.

   Learn More >>

Product Announcements

Are you interested in time travel through network packets?

We’re looking for Active Development Partners who would like to engage in security research by applying Suricata Rules and network packet queries to the GreyNoise historical dataset. If you're interested, please email product@greynoise.io.

Where to find us

  • CriblCon (In-Person | Oct 13-15) If you're gonna be at CriblCon at the National Harbor, make sure to check out our booth! Learn More >>
  • GreyNoise University LIVE (Virtual | Oct 30) GreyNoise 101, now known as GreyNoise University LIVE is BACK! We are stoked to bring back this once-a-month webinar.  Learn More >>
  • fal.con EU (In-Person | Nov 4-6) We are headed to Barcelona for fal.con EU 2025, come by booth #45 for a chance to talk with the team + grab some swag.  Learn More >>
  • SuriCon 2025 (In-Person | Nov 19-21) Join us and our amazing researchers as they speak at this year's SuriCon. Check us out at our booth for swag + great conversation! Learn More >>

Fresh Content

Recent Tags and Vulnerabilities

GreyNoise Labs released 354 tags during the month of September (YES this is a record 🤯):

Community

  • Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team. 
  • Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
  • Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke. 

Meme of the Month

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Life @ GreyNoise

Got (most) of the team together and it was ✨magical✨

Not subscribed to our NoiseLetter? Subscribe here.

Welcome back to the NoiseLetter, fashionably late edition! 💅 Sorry for the delay, but we were busy hanging with the team at our company offsite! Now we're back with exciting updates: our new GreyNoise MCP Server launch, insights on Cisco ASA zero-day scanning and VPN brute force attacks, plus upcoming events where you can catch us live. Let's get into it!

Bob Unfiltered

VP of Data Science + Research, Bob Rudis, creatively gives his thoughts, hot-takes, and whatever else he feels like.

Featured

GreyNoise Launches MCP Server for AI Security Agents

GreyNoise's new MCP Server lets AI agents query threat intelligence in real time, distinguishing benign scanners from actual threats. This enables smarter alert triage, vulnerability prioritization, and incident response while reducing false positives.

Security teams can also use it with LLM tools like Claude to quickly generate intelligence reports and analyze threat trends. It's not about replacing analysts—it's about giving AI agents the same noise-filtering capabilities SOC teams already rely on for more reliable automation.

   Learn More >>

Product Announcements

Are you interested in time travel through network packets?

We’re looking for Active Development Partners who would like to engage in security research by applying Suricata Rules and network packet queries to the GreyNoise historical dataset. If you're interested, please email product@greynoise.io.

Where to find us

  • CriblCon (In-Person | Oct 13-15) If you're gonna be at CriblCon at the National Harbor, make sure to check out our booth! Learn More >>
  • GreyNoise University LIVE (Virtual | Oct 30) GreyNoise 101, now known as GreyNoise University LIVE is BACK! We are stoked to bring back this once-a-month webinar.  Learn More >>
  • fal.con EU (In-Person | Nov 4-6) We are headed to Barcelona for fal.con EU 2025, come by booth #45 for a chance to talk with the team + grab some swag.  Learn More >>
  • SuriCon 2025 (In-Person | Nov 19-21) Join us and our amazing researchers as they speak at this year's SuriCon. Check us out at our booth for swag + great conversation! Learn More >>

Fresh Content

Recent Tags and Vulnerabilities

GreyNoise Labs released 354 tags during the month of September (YES this is a record 🤯):

Community

  • Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team. 
  • Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
  • Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke. 

Meme of the Month

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Life @ GreyNoise

Got (most) of the team together and it was ✨magical✨

Not subscribed to our NoiseLetter? Subscribe here.

Read the transcript