GreyNoise Labs

ID: 8f90b2ac-3023-56a1-9bb8-389f970e8446

STIX ID: identity--8f90b2ac-3023-56a1-9bb8-389f970e8446

Feed Type: rss

Earliest post: 2023-03-23

Latest post: 2026-02-15

Threat intelligence research and internet-wide scanning insights from GreyNoise Labs — profiling noisy scanners, adversary tooling, IoAs, and background internet traffic to help defenders filter noise and focus on real threats.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

10/14/2026

Title	Date Published ↓	Threat Score	Author	Visible
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-02-13	2026-02-15	72	🔮Orbie✨	True
2026-01-14: The Day the telnet Died	2026-02-10	78	hrbrmstr & 🔮Orbie✨	True
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-02-06	2026-02-07	50	🔮Orbie✨	True
Vive La Vulnérabilité: French Kubernetes Cluster Hunts Your Webhook Endpoints	2026-02-03	70	hrbrmstr & 🔮Orbie✨	True
Dual-Mode Citrix Gateway Reconnaissance: When Residential Proxies Meet Version Hunting	2026-02-02	70	hrbrmstr & 🔮Orbie✨	True
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-01-31	2026-01-31	75	🔮Orbie✨	True
Inside the Infrastructure: Who’s Scanning for Ivanti Connect Secure?	2026-01-29	78	Glenn Thorpe & 🔮Orbie✨	True
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-01-24	2026-01-24	70	🔮Orbie✨	True
-f Around and Find Out: 18 Hours of Unsolicited Telnet Houseguests	2026-01-22	70	hrbrmstr + 🔮Orbie✨	True
Creepy Crawlers: Hunting Those Who Hunt For WordPress Plugins	2026-01-19	65	hrbrmstr + 🔮Orbie✨	True
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-01-17	2026-01-18	60	🔮Orbie✨	True
SmarterMail Version Enumeration: Threat Actors Building Target Lists Post-CVE-2025-52691	2026-01-13	78	hrbrmstr	True
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-01-09	2026-01-10	70	hrbrmstr	True
ColdFusion++ Christmas Campaign: Catching a Coordinated Callback Calamity	2025-12-26	80	hrbrmstr	True
React2Shell Side Quest: Tracking Down Malicious MeshCentral Nodes	2025-12-09	75	hrbrmstr	True
The PoC Pollution Problem: How AI-Generated Exploits Are Poisoning Detection Engineering	2025-07-30	35	h0wdy & hrbrmstr	True
Checking the Scope of CVE-2025-48927	2025-07-16	80	h0wdy	True
Exploiting Erlang OTP with Zip files: CVE-2025-4748	2025-06-17	60	remy	True
AyySSHush: Tradecraft of an emergent ASUS botnet	2025-05-28	80	remy	True
CVE-2025-32433 - State Machine Err-ly RCE in Erlang/OTP SSH Server	2025-04-22	75	Konstantin Lazarev	True
Yer a Wizard! Tagging Hard-coded Credentials Can Lead to Finding Magic (Numbers)	2024-12-03	45	Konstantin Lazarev	True
Null problem! Or: the dangers of an invisible byte	2024-11-20	25	Ron Bowes	True
CVE-2024-8956, CVE-2024-8957: How to Steal a 0-Day RCE (With a Little Help from an LLM)	2024-10-31	75	Konstantin Lazarev	True
Whatchu looking for (starring SolarWinds Serv-U - CVE-2024-28995)	2024-09-30	60	Ron Bowes	True
BLUUID: Firewallas, Diabetics, And… Bluetooth	2024-08-20	78	Remy	True
Command and Control (C2) Servers 101	2024-07-18	70	Konstantin Lazarev	True
Perma-Vuln: D-Link DIR-859, CVE-2024-0769	2024-06-25	75	Remy	True
SolarWinds Serv-U (CVE-2024-28995) exploitation: We see you!	2024-06-18	55	Ron Bowes	True
What’s Going on With CVE-2024-4577 (Critical RCE in PHP)?	2024-06-13	78	Konstantin Lazarev	True
Decrypting FortiOS 7.0.x	2024-04-23	30	GreyNoise Labs Research Team	True
Where are they now? Starring: Confluence CVE-2023-22527	2024-03-13	75	Ron Bowes	True
Hunting for Fortinet CVE-2024-21762: Vulnerability Research for Detection Engineering	2024-03-08	75	h0wdy	True
Code injection or backdoor: A new look at Ivanti’s CVE-2021-44529	2024-02-16	30	Ron Bowes	True
The Confusing History of F5 BIG-IP RCE Vulnerabilities	2024-01-19	75	Ron Bowes	True
Panic!! At the YAML	2024-01-03	70	Ron Bowes	True
If You’re Going to Spray My Exploit… (CVE-2022-41800)	2023-12-13	70	Ron Bowes	True
Talk-A-Blog: Apache Struts2 CVE-2023-50164, File Upload Vulnerability Analysis	2023-12-12	75	Remy	True
The Forgotten ownCloud vulnerability (CVE-2023-49105)	2023-12-05	85	Ron Bowes	True
Don’t Leave Me on Read: The Efficacy of Dynamic Honeypots for Novel Exploitation Discovery	2023-12-05	75	h0wdy	True
Details and Caveats for ownCloud information disclosure (CVE-2023-49103)	2023-11-29	30	Ron Bowes	True
⭕ Emulating and Exploiting Oracle WebLogic Server for PCap Analysis (CVE-2023-21839)	2023-04-21	75	h0wdy	True
EdgeLord: Schrödinger’s 0-Day	2023-03-23	70	some one	True