On the Internet, Everything Old is Exploitable Again

The Censys Research Team summarizes GreyNoise's Mass Internet Exploitation Report, showing that attackers in 2024 continued to exploit legacy vulnerabilities at scale (including CVE-2017-9841 and older CVEs) while also targeting new edge-device flaws (e.g., Ivanti and Pulse Secure); the report notes malware like Androxgh0st that chains old and new exploits and emphasizes that systematic asset inventory, configuration management, and timely patching are critical to mitigate these widespread exploitation campaigns.