This holiday season, run our IP Check at your family’s house, a free tool that answers a question we hear constantly: "How do I know if my home network has been compromised?" https://www.greynoise.io/blog/your-ip-address-might-be-someone-elses-problem

RE: https://infosec.exchange/@greynoise/115572883475637524 LIVE in 8! 🚨

🚨 Palo Alto GlobalProtect scanning surged 40X in 24hrs...a 90-day high. 2.3M login attempts from concentrated infrastructure (AS200373/AS208885). Block these IPs now: https://www.greynoise.io/blog/palo-alto-scanning-surges-90-day-high

Attackers move fast, so your blocklists should too. GreyNoise now lets you convert any query into a real-time blocklist that updates automatically as attacker infrastructure changes. Start using it today on the GreyNoise platform. 🔗 https://www.greynoise.io/blog/introducing-query-based-blocklists

Looking forward to seeing folks this Thursday at 12 ET for another GreyNoise University LIVE. Join Michael + @jordyn for a fun and informative demo + walkthrough of all things GreyNoise. ✨ Register today: https://www.greynoise.io/events/greynoise-university-live

EU sanctioned Stark Industries in May. Leaked docs gave them 12 days warning. Result: ASN shuffle, rebrand to THE.Hosting. Corporate shells changed, network behavior didn't. We tracked it: AS44477→AS209847. Packets don't lie. 🔗 https://www.greynoise.io/blog/stark-industries-shell-game

Hey Canada, we're packed up + headed to #SuriCon25! 🇨🇦 Check out our booth and don't miss @ntkramer + @iagox86's talk ...and if you happen to run into them or @hrbrmstr#suricon25around the con, they might have something special for you 🥧...

🚨 GreyNoise for Microsoft Sentinel is here! Filter out internet background noise automatically. Focus on real threats. #MicrosoftSentinel #appassure 🔗 https://techcommunity.microsoft.com/blog/MicrosoftSentinelBlog/ignite-2025-new-microsoft-sentinel-connectors-announcement/4454613

We’ve launched At The Edge, a weekly brief for GreyNoise customers highlighting shifts in attacker behavior seen across the Global Observation Grid (GOG). Human-led analysis that turns internet noise into insight defenders can act on. #threatintel #greynoise

We deployed MCP honeypots to understand how threat actors engage with AI middleware exposed to the internet. What we observed was unexpected. Full analysis: https://www.greynoise.io/blog/deploying-mcp-honeypots #greynoise #ai #aisecurity #mcp #mcpsecurity #cybersecurity #threatintel

The ace @greynoise comms team feed my PHP/cryptomining post from PDF purgatory and spiffied it up into a full-on GN blog post: https://www.greynoise.io/blog/php-cryptomining-campaign

GreyNoise has observed a surge in PHP exploitation activity since late summer — now peaking as attackers deploy cryptominers at scale. Full analysis → https://www.greynoise.io/blog/php-cryptomining-campaign #greynoise #php #threatintel

Headed to #falconeurope2025 this week? Come by booth 45 and chat with the team. On Wednesday, continue the conversation at our joint happy hour with Cribl + NetBuilder from 7-?? at Nobu Barcelona, sign up today! ⬇️ […]

Happy Halloween from your fave GreyNerds 🍬🍫

Happy Halloween from the GreyNoise ghouls + goblins! This month's NoiseLetter is packed to the brim with tricks + treats, catch up on all the haunts from this past month and be sure to check back in later for the results of our annual Candy Bracket 🎃 […]

Tune in for a very spooky GreyNoise University LIVE, tomorrow October 30th @ 12 ET. Sign up today, if you dare! 🕸️ https://www.greynoise.io/events/greynoise-university-live

Tune in for a very spooky GreyNoise University LIVE, tomorrow October 30th @ 12 ET. Sign up today, if you dare! 🕸️ https://www.greynoise.io/events/greynoise-university-live

We are excited to sponsor #falconeurope2025 next week in Barcelona! If you're there come by booth 45, or want to meet up with the team, let us know! https://www.greynoise.io/events/fal-con-europe-2025

Want an inside look at what happens when attackers pop our honeypots + AWS slides into our inbox? 📥 Check out Corey's latest blog: https://www.greynoise.io/blog/we-got-yelled-at-by-amazon-so-you-didnt-have-to

Threat Actors Rotating New IPs Daily to Attack Microsoft RDP 🔗Full analysis: https://www.greynoise.io/blog/threat-actors-deploying-new-ips-microsoft-rdp #rdp #greynoise #threatintel

GreyNoise's Threat Intelligence Map visualizes network events across the internet, scans, probes, attacks + connects them to geopolitical context. Real-time intelligence, that looks pretty cool too 😎 🗺️ https://threat-map.greynoise.io/

Amid the security incident involving F5 BIG-IP announced today, GreyNoise is sharing recent insights into activity targeting BIG-IP to aid in defensive posturing. The anomalies reported in our blog may not necessarily relate to the 15 Oct incident. ⬇️ […]

A global botnet has tripled in size in the past five days, so GreyNoise is sharing an executive situation report (SITREP) to streamline decision making. Full SITREP: https://info.greynoise.io/hubfs/Situation-Reports/GreyNoise-SITREP-RDP-Attacks.pdf Use […] [Original post on infosec.exchange]

Attacker infrastructure evolves in real time. Your defenses should too. Introducing GreyNoise Block, ensuring your blocklists update automatically. 🦾 https://www.greynoise.io/blog/introducing-greynoise-block

Hey #criblcon25 👋 Looking forward to seeing you soon! 👻🤝🐐

A 100,000-IP botnet is actively targeting U.S. RDP infrastructure. 🔗 Read the analysis: https://www.greynoise.io/blog/botnet-launches-coordinated-rdp-attack-wave #threatintel #cybersecurity #rdp #botnet #greynoise

The GreyNoise team will be at #criblcon next week and we would love to see you there! If you are headed to Maryland for the event, check out our booth and talk to the team. 👻🤝🐐 🔗 https://events.cribl.io/criblcon25/begin?code=CC25-JoinGreynoise

GreyNoise has linked three concurrent campaigns targeting remote-access technologies — Palo Alto login attempts, Fortinet SSL VPN brute-forcing, and Cisco ASA scanning — all partially driven by the same threat actor(s) High Confidence]. Full analysis 👇 […]

GreyNoise Feeds are here: real-time webhook alerts for CVE status changes, exploitation spikes, and IP classification changes. No more polling. Respond the moment threats emerge. 🦾 www.greynoise.io/blog/introducing-greynoise-feeds-real-time-intel-real-time-response

Palo login attempts are escalating, potentially driven by iteration through a large credential dataset. GreyNoise is sharing observed usernames/passwords for defender review. 🔗 Latest: https://www.greynoise.io/blog/palo-alto-scanning-surges #paloaltonetworks #threatintel

NoiseLetter, but make it fashionably late... 💅 We were at our company offsite, but we're back with our new GreyNoise MCP Server launch, Cisco ASA zero-day and VPN brute force insights, plus upcoming events, let's get into it! https://www.greynoise.io/resources/noiseletter-september-2025

GreyNoise observed a ~500% surge in IPs scanning Palo Alto Networks login portals on October 3, 2025 — the highest level we’ve seen in 90 days. Read our full analysis here 👉 https://www.greynoise.io/blog/palo-alto-scanning-surges #paloaltonetworks #paloalto #greynoise #threatintel #panos

On 28 September, GreyNoise observed a sharp one-day surge in attempts to exploit Grafana CVE-2021-43798. Full analysis & malicious IPs ⬇️ https://www.greynoise.io/blog/coordinated-grafana-exploitation-attempts #grafana #greynoise #threatintel

We got (most of) the team together last week and it was magical, so grateful for each + every one of these GreyNoids ✨

GreyNoise now has coverage for Cisco zero-days CVE-2025-20333 and CVE-2025-20362. Watch for exploit attempts in real-time:CVE-2025-20333 (Net-new): https://viz.greynoise.io/tags/cisco-asa-vpn-input-validation-cve-2025-20333-rce-attempt?days=1CVE-2025-20362 (Updated tag) […]

🚨GreyNoise has published a new Situation Report on Cisco ASA reconnaissance activity we observed before the new zero-days were disclosed. Read the full report: https://info.greynoise.io/hubfs/Situation-Reports/SITREP-Cisco-Zero-Days.pdf #Cisco #ASA […] [Original post on infosec.exchange]

Sept 25: Cisco disclosed two ASA/FTD zero-days (#CVE-2025-20333, #CVE-2025-20362). Weeks earlier, GreyNoise saw 25k IPs scanning ASA — another case of recon surges preceding disclosures. Read the update: https://www.greynoise.io/blog/scanning-surge-cisco-asa-devices #ciscoasa #zeroday #cisco

Hey Toronto! 🇨🇦 We will be up North next week with @runZeroInc for #sector! Come hang out on Wednesday for some drinks + good conversation! 🔗 https://www.runzero.com/sector-happy-hour/

🗣️ Catch @Dio9sys talk this weekend at #pancakescon! ⏰ Sunday, 9/21 from 12:20–1:00 PM CT 🎤 One-liners and One Needle: Bash and Needlebinding 📺 https://www.youtube.com/live/P4Shsxwe5C0

RE: https://infosec.exchange/@greynoise/115220504354435524 LIVE in 15 ⏲️

GreyNoise Intel is now accessible via MCP! AI agents and SOCs can triage, respond, and monitor threats with real-time IP reputation + behavior tags. Automate remediation, reduce false positives, + prioritize active threats. Learn more ➡️ […]

GreyNoise University LIVE is back from a little summer break and ready to dive into demos, events, updates + dad jokes. Catch up with us TOMORROW at 12 ET! 📺 https://www.greynoise.io/events/greynoise-university-live

We're looking for some awesome folks to join our team! If one of these roles catches your eye, we'd love to hear from you. 👩‍💻 greynoise.io/careers

Our very own Daniel Grant is dropping knowledge on how to outsmart malicious AI in his latest feature. 🤖 https://medium.com/authority-magazine/cybersecurity-to-protect-from-malicious-ai-daniel-grant-of-greynoise-intelligence-on-how-to-2acf8e086d40

See you soon! @hrbrmstr + Noah are bringing a jam-packed webinar getting into our most recent report, Early Warning Signals: When Attacker Activity Precedes New Vulns, you’ll definitely want to tune in. 📺 […]

Hey London 👋🇬🇧 Join us Sept 11 at the Crowne Plaza Docklands during #dsei for a GreyNoise Threat Brief! Insights, drinks, light fare, networking, limited swag + CPE credits all waiting for you!🍻 ⏰ 16:30–18:30 👇 Save your spot today! https://info.greynoise.io/greynoise-threat-briefing-dsei

GreyNoise observed two scanning surges against Cisco ASA devices in late August, both representing significant elevations above baseline. This activity led to the discovery of a botnet cluster solely scanning for Cisco ASA on August 26. Full analysis […]

We survived August in the desert, with fresh insights on early warning signals, 73 new threat tags, + lots of upcoming events. Check out August's NoiseLetter for everything you need to know this month. ☀️ https://www.greynoise.io/resources/noiseletter-august-2025

We’re honored that GreyNoise Intelligence was acknowledged in the latest joint cyber advisory from the NSA Cybersecurity Collaboration Center and partner agencies. Read the full advisory here […] [Original post on infosec.exchange]

30,000+ IPs hit Microsoft Remote Desktop on Aug 24, a significant escalation from our original reporting of nearly 2,000 IPs on August 21. Full analysis: https://www.greynoise.io/blog/surge-malicious-ips-probe-microsoft-remote-desktop #ThreatIntel #RDP […] [Original post on infosec.exchange]