GreyNoise analyzes Internet background noise. Use GreyNoise to remove pointless security alerts, find compromised devices, or identify emerging threats.
Public Key
npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 Profile Code
nprofile1qqs0ak5y0mdrjgdvl2zvrrpk9p7yng2jma6pnt4g6lg56p35v7vxdjsprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqy28wumn8ghj7un9d3shjtnyv9kh2uewd9hsrkqn7v
Show more details
Published at
2026-06-26T03:03:22Z Event JSON
{
"id": "9b4af5950669cf26535cbfc8348ba3625a13701feb7bd7e8824b5dfab8f4cb0a" ,
"pubkey": "feda847eda3921acfa84c18c36287c49a152df7419aea8d7d14d0634679866ca" ,
"created_at": 1782443002 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://infosec.exchange/users/greynoise",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/greynoise",
"pink.momostr"
],
[
"-"
]
],
"content": "{\"name\":\"GreyNoise\",\"about\":\"GreyNoise analyzes Internet background noise. Use GreyNoise to remove pointless security alerts, find compromised devices, or identify emerging threats.\\n\\n(Yes, it's really us. - Love, GreyNoise )\",\"website\":\"https://infosec.exchange/@greynoise\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/287/162/176/762/744/original/03f75c5756bc3459.png\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/287/162/176/762/744/original/ca6d970047e54339.png\",\"nip05\":\"[email protected] \"}" ,
"sig": "b20ed55d83d29e334a6d14eef085f63d7f6bfaab2ed31fac2076f4fc61310bbdee8bfca23c8e98fa1ddea417c5ed7544f17d2e80989df790388a0949f1d6517e"
}
Last Notes npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise Three things that caught our eye at the edge this week: npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise NoiseFest is BACK 🎉 npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise The mission: make sure no attack works twice. 🚀 npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise We observed a 65% drop in global telnet traffic in a single hour on Jan 14, settling into a sustained 59% reduction. 18 ASNs went silent, 5 countries disappeared, but cloud providers were unaffected. npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise 🚨 Palo Alto GlobalProtect scanning surged 40X in 24hrs...a 90-day high. npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise EU sanctioned Stark Industries in May. Leaked docs gave them 12 days warning. npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise GreyNoise now has coverage for Cisco zero-days CVE-2025-20333 and CVE-2025-20362. Watch for exploit attempts in real-time:CVE-2025-20333 npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise On August 21, GreyNoise observed nearly 2,000 malicious IPs probing Microsoft Remote Desktop (RDP) services in a single day — a sharp deviation from baseline activity. Full blog: https://www.greynoise.io/blog/surge-malicious-ips-probe-microsoft-remote-desktop npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise Two critical Ivanti zero-days (CVE-2025-4427 + CVE-2025-4428) are now being actively exploited after a surge in scanning activity last month. Immediate patching is required. Get more details here ⬇️ https://www.greynoise.io/blog/ivanti-epmm-zero-days-reconnaissance-exploitation npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise 🚨 9X Surge in Scanning for Ivanti Connect Secure. No CVEs are tied to this yet, but patterns like this often precede exploitation. Full analysis + suspicious IPs: https://www.greynoise.io/blog/surge-ivanti-connect-secure-scanning-activity #Ivanti #Cybersecurity #Scanning npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise 🚨 New GreyNoise Tag Alert: We've added a fresh tag tracking CrushFTP Authentication Bypass (CVE-2025-2825) exploitation attempts. Thanks to @npub13ar…p2f4 for the intel! Dive into the details: https://viz.greynoise.io/tags/crushftp-authentication-bypass-cve-2025-2825-attempt npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise 🚨Active Exploitation Alert: Critical Apache Tomcat RCE (CVE-2025-24813). Majority of traffic targeting U.S.-based systems. Full analysis & attacker IPs: https://greynoise.io/blog/active-exploitation-critical-apache-tomcat-rce-vulnerability-cve-2025-24813 npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise 🚨 March 12 UPDATE: Grafana Exploitation May Signal Multi-Phase SSRF Attacks. Update + original analysis: https://www.greynoise.io/blog/new-ssrf-exploitation-surge #Cybersecurity #GreyNoise #Vulnerability npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise Where do you get the most actionable threat intel? 🧐 npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8 GreyNoise 🚨 Hackers Are Exploiting Fortinet Firewalls 🚨
