Who's in Montreal for #Suricon? I'm there speaking and representing @greynoise.io! Come say hi! We also have a very limited special giveaway. Pro tip: if people ask me for it then I don't have to work to give them away, so if you want a cool prototype thing then just ask!

EU sanctioned Stark Industries in May. Leaked docs gave them 12 days warning. Result: ASN shuffle, rebrand to THE.Hosting. Corporate shells changed, network behavior didn't. We tracked it: AS44477→AS209847. Packets don't lie.

Hey Canada, we're packed up + headed to #SuriCon25! 🇨🇦 Check out our booth and don't miss @ntkramer.bsky.social + @iagox86.bsky.social talk ...and if you happen to run into them or @hrbrmstr.dev around the con, they might have something special for you 🥧...

The emus are performing arcane summoning rituals in the backyard again. (This seems particularly appropriate to share today, in response to @tkingfisher.com's recent D&D emu adventures)

Every week or so, the preview that is didn't ask for, don't use, and don't want expires. After nearly 10 years, all I can think of is how much I miss the old Duolingo

🚨 GreyNoise for @microsoft.com Sentinel is here! Filter out internet background noise automatically. Focus on real threats. #MicrosoftSentinel #AppAssure 🔗 techcommunity.microsoft.com/blog/Microso...

For folks (and journalists) who want to search the Oversight Committee email texts, I made a database for searching the 20k text files: splendorous-chaja-f79791.netlify.app

The Jokers of Magic return in 2026 with dates in January and March! See tour dates and ticket links at…

Marriott cancelled my Sonder booking (due to bankruptcy or something) and I'm having to jump through loops for a refund.. pretty sure this is what Chargebacks are for but that feels like the nuclear option Also this means I have less than a week to re-book my stay in Montreal...

@aminal_crossing on ig was banned for posting this

We’ve launched At The Edge, a weekly brief for GreyNoise customers highlighting shifts in attacker behavior seen across the Global Observation Grid (GOG). Human-led analysis that turns internet noise into insight defenders can act on. #ThreatIntel #GreyNoise

We deployed MCP honeypots to understand how threat actors engage with AI middleware exposed to the internet. What we observed was unexpected. Full analysis ⬇️ #GreyNoise #AI #AISecurity #MCP #MCPSecurity #Cybersecurity #ThreatIntel

GreyNoise has observed a surge in PHP exploitation activity since late summer — now peaking as attackers deploy cryptominers at scale. Full analysis ⬇️ #GreyNoise #PHP #ThreatIntel

Headed to #FalConEurope2025 this week? Come by booth 45 and chat with the team. On Wednesday, continue the conversation at our joint happy hour with Cribl + NetBuilder from 7-?? at Nobu Barcelona, sign up today! ⬇️

turned this on to highlight spam accounts and I’m learning a lot about who has insomnia and/or posts when they get up to pee in the middle of the night

Happy Halloween from your fave GreyNerds 🍬🍫

Tune in for a very spooky GreyNoise University LIVE, tomorrow October 30th @ 12 ET. Sign up today, if you dare! 🕸️

We derestricted crbug.com/382005099 today which might just be my favorite bug of the last few years: bad interaction between WebAudio changing the CPU's handling of floats and V8 not expecting that. See crbug.com/382005099#co... for a PoC exploit. Also affected other browsers

Sent to me by an associate, confirmed true on multiple accounts. Note: This is hidden in Android app and needs to be addressed from desktop webapp.

TLDR; The PSF has made the decision to put our community and our shared diversity, equity, and inclusion values ahead of seeking $1.5M in new revenue. Please read and share. pyfound.blogspot.com/2025/10/NSF-... 🧵

Ron (@iagox86.bsky.social) and I are presenting at #Suricon (Montreal) next month! If you're around, you'll definitely want to find us for some sweet swag (oh, and our talk is pretty cool too!). suricon.net/agenda-m...

EXCLUSIVE: One Saturday afternoon in October, my phone lit up with a notification. I glanced down at the message. “Anna, Lindsey Halligan here,” it began. So began my text exchange with the woman who is prosecuting the president's perceived political enemies. www.lawfaremedia.org/article/anna...

Threat Actors Rotating New IPs Daily to Attack Microsoft RDP Full Analysis ⬇️ #RDP #GreyNoise #ThreatIntel

@tkingfisher.com Hey, wondering if there's anywhere I can buy your books DRM-free?

Clicked a news alert on the current version of Android and it took me to an AI page. Whyyyy, just link me to the news story!!

Amid the security incident involving F5 BIG-IP announced today, GreyNoise is sharing recent insights into activity targeting BIG-IP to aid in defensive posturing. The anomalies reported in our blog may not necessarily relate to the 15 Oct incident. ⬇️

A global botnet has tripled in size in the past five days, so GreyNoise is sharing an executive situation report (SITREP) to streamline decision making. Full SITREP: info.greynoise.io/hubfs/Situat...

Attacker infrastructure evolves in real time. Your defenses should too. Introducing GreyNoise Block, ensuring your blocklists update automatically. 🦾

Hey #CriblCon25! 👋 Looking forward to seeing you soon! 👻🤝🐐

GreyNoise has linked three concurrent campaigns targeting remote-access technologies — Palo Alto login attempts, Fortinet SSL VPN brute-forcing, and Cisco ASA scanning — all partially driven by the same threat actor(s) [High Confidence]. Full analysis 👇 #Palo #Cisco #Fortinet #ThreatIntel

Palo login attempts are escalating, potentially driven by iteration through a large credential dataset. GreyNoise is sharing observed usernames/passwords for defender review. 🔗 Latest: www.greynoise.io/blog/palo-al... #PaloAltoNetworks #ThreatIntel

NoiseLetter, but make it fashionably late... 💅 We were at our company offsite, but we're back with our new GreyNoise MCP Server launch, Cisco ASA zero-day and VPN brute force insights, plus upcoming events, let's get into it!

GreyNoise observed a ~500% surge in IPs scanning Palo Alto Networks login portals on October 3, 2025 — the highest level we’ve seen in 90 days. Read our full analysis here 👇 #PaloAltoNetworks #PaloAlto #GreyNoise #ThreatIntel #PANOS

On 28 September, GreyNoise observed a sharp one-day surge in attempts to exploit Grafana CVE-2021-43798. Full analysis & malicious IPs ⬇️ #Grafana #GreyNoise #ThreatIntel

GreyNoise now has coverage for Cisco zero-days CVE-2025-20333 and CVE-2025-20362. Watch for exploit attempts in real-time: CVE-2025-20333 (Net new): viz.greynoise.io/tags/cisco-a... CVE-2025-20362 (Updated tag): viz.greynoise.io/tags/cisco-a... #CiscoASA #ZeroDay #CVE202520333 #CVE202520362

I was getting my (second shot of 3) Hepatitis B vaccine yesterday, and the nurse administering it asked if I knew where/how to get the COVID booster Was it REALLY necessary to throw a ton of confusion into the vaccine situation??

How Ruby went off the rails: A deep dive into the ownership and governance drama of some of the most important open source projects in the world www.404media.co/how-ruby-wen...

"It's my fault, I asked if you could read, not if you could count" "if I could count I wouldn't have had four children" --Gabriella Lester and her volunteer at Scoopfest @heyscoops.bsky.social

Wow, Michael Goudeau performed at Scoopfest! I didn't think I'd ever get to see him perform! @heyscoops.bsky.social

Sept 25: Cisco disclosed two ASA/FTD zero-days (#CVE-2025-20333, #CVE-2025-20362). Weeks earlier, GreyNoise saw 25k IPs scanning ASA — another case of recon surges preceding disclosures. Read the update: www.greynoise.io/blog/scannin... #CiscoASA #ZeroDay #Cisco

My feed this week is a mix of Scoopfest (improv/magic/podcast stuff) and security.. makes me miss the old days before the world turned into.. this

Nick Paul and @mindnoodler.bsky.social performing magic at Scoopfest! @heyscoops.bsky.social

Lindsay Benner and Gary @ Scoopfest! What a cool show! @heyscoops.bsky.social

Pretty unfortunate update on Fortra GoAnywhere MFT CVE-2025-10035 from the folks at watchTowr labs.watchtowr.com/it-is-bad-ex...

Hey Toronto! 🇨🇦 We will be up North next week with runZero for #SecTor! Come hang out on Wednesday for some drinks + good conversation! 🔗 www.runzero.com/sector-happy...

The Bucket Show @heyscoops.bsky.social

and shout out to @iagox86.bsky.social who figured out the access control bypass part of this back in his 2023 analysis of the CVE-2023-0069 patch 🔥