GreyNoise (@greynoise.io)

🎙️ Our own @hrbrmstr.dev, VP of Data Science, hit up @thecyberwire's Research Saturday to drop 🔥 on attacker early warning signals. 👀 80% of the time, hackers poke VPNs & firewalls before CVEs hit.

loading . . .

The CVE countdown clock. Bob Rudis⁠, VP Data Science from ⁠GreyNoise⁠, is sharing some insights into their work on "Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities." New research reveals a striking trend: in 80% of cases, spikes in malicious activity against enterprise edge technologies like VPNs and firewalls occurred weeks before related CVEs were disclosed. The report breaks down this “6-week critical window,” highlighting which vendors show the strongest early-warning patterns and offering tactical steps defenders can take when suspicious spikes emerge. These findings reveal how early attacker activity can be transformed into actionable intelligence, enabling defenders to anticipate and neutralize threats before vulnerabilities are publicly disclosed. https://thecyberwire.com/podcasts/research-saturday/389/notes