NoiseLetter - November 2023

We are excited to share all the incredible things we have been working on. From sponsoring CYBERWARCON to creating 17 new tags, researching multiple new vulnerabilities, and releasing a new integration, our team has been incredibly busy. Discover what we've been up to and get a sneak peek into what's coming up next in this month's NoiseLetter.

Andrew Unfiltered

GreyNoise CEO Andrew Morris gives his thoughts, hot-takes, and whatever else he feels like.

Announcements

New Integration

GreyNoise has recently released a new integration for Microsoft Sentinel, enhancing the capabilities of threat intelligence for business security. Learn More >>

Storm Watch - Weekly Livestream and Podcast

Storm Watch is a livestream hosted by the GreyNoise team, where we dive into recent vulnerabilities, emerging threats, and so much more. It all began with a video livestream in May, and now we are thrilled to announce that we have also released it as a podcast. Tune in every Tuesday at 9:30am CT / 10:30am ET to watch or listen. We would absolutely love for you to join us, whether it's to heckle our hosts, share your thoughts, or simply stay up to date with all things cybersecurity. Learn More >>

12 Days of Tagmas - GreyNoise Tagvent Calendar

Each day we will share details about how a tag was discovered, long term impacts, and why/if defenders should still be concerned. There will also be a few surprises along the way. Learn More >>

Where to find us

‍GreyNoise 101 +201 (Virtual | Thursday, Nov. 30th) This 1-hour session is perfect for anyone new to GreyNoise and interested in learning how to use the platform. In the first 30 minutes, we'll cover the basics and give you a solid foundation. Stick around for the last 30 minutes to dive into more advanced use cases. Don't miss this opportunity to level up your GreyNoise skills.
DoDIIs Conference (In-Person | Portland, OR | Dec. 12-14) GreyNoise will be sponsoring DoDIIs again this year! If you are going to be at this event swing by Booth #852 for some awesome swag or schedule 1:1 time to get a demo and chat with the team.
Sift Webinar (Virtual | Thursday, Dec. 14) Sift is a GreyNoise Intelligence application that uses advanced AI/ML to help Threat Intelligence Analysts and Detection Engineers stay ahead of emerging threats.

Fresh Content

Blog: Getting A Leg Up On Initial Access Ransomware With CISA KEV and GreyNoise Tags
Blog: Unveiling the Deceptive World: Honeypots vs Honeytokens
Blog: Quickly Triaging HTTP Traffic From GreyNoise’s New Hosted Sensors
Video: Weekly Livestream - Storm Watch
eBook: GreyNoise 2023 Guide to Threat Hunting
OnDemand Webinar: Stay Ahead of Cyber Threats with GreyNoise
Country Reports: Attackers Without Borders

Recent Vulnerabilities

CVE-2023-49103: ownCloud
CVE-2023-29552: Service Location Protocol (SLP)
View All Recent Tags >>

Newly Released Tags

GreyNoise Labs released 17 tags during the month of November

2023-11-27 — ownCloud Graph API Information Disclosure
2023-11-22 — Movable Type mt-upgrade.cgi RCE Attempt
2023-11-22 — 74CMS SQL Injection Attempt
2023-11-21 — MantisBT SOAP API Version Check
2023-11-20 — Zemra Botnet CnC Web Panel RCE Attempt
2023-11-20 — CrushFTP RCE Attempt
2023-11-17 — Oracle WebLogic CVE-2014-4210 SSRF Attempt
2023-11-15 — rConfig SQL Injection Attempt
2023-11-14 — FSMLabs TimeKeeper RCE Attempt
2023-11-13 — SysAid ITIL Anonymous User Registration Attempt
2023-11-11 — favicon.ico Scanner
2023-11-08 — SLP (Service Location Protocol) Scanner
2023-11-07 — phpDocumentor RCE Check
2023-11-06 — Seowon SLC-130 SLR-120S RCE Attempt
2023-11-03 — Atlassian Confluence Server Authentication Bypass Attempt
2023-11-02 — Apache ActiveMQ RCE Attempt
2023-11-01 — Beanshell Command Injection Attempt

Joke of the Month

November-security-joke — https://infosec.exchange/@bontchev/111373844194274715

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Community

Request a New GreyNoise Tag - We've just published a new page to allow our amazing community to submit tag requests to the GreyNoise team.
‍Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
‍Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke.
Join the GreyNoise Team - Help develop the next generation of internet intelligence products. GreyNoise culture is rooted in transparency, communication, and community. We believe these core tenets enable diversity, equity, and inclusion. Check out our current openings.

‍

Not subscribed to our NoiseLetter? Subscribe here.

‍

Summary