GreyNoise

A critical command injection vulnerability (CVE-2026-1731) in BeyondTrust's remote access software is being actively exploited, allowing unauthenticated attackers to run…

A critical vulnerability (CVE-2026-1281) in Ivanti's EPMM platform is being actively exploited, with attackers implanting hidden, dormant backdoors that are…

A new tool called IP Check from GreyNoise allows users to quickly see if their public IP address has been…

A fortyfold surge in malicious scanning targeting Palo Alto Networks GlobalProtect VPN portals began on November 14, 2025, marking the…

GreyNoise reported a 500% surge in reconnaissance scans targeting Palo Alto Networks login interfaces, with 1,300 distinct IPs detected on…

A coordinated cyberattack is targeting Cisco, Palo Alto Networks, and Fortinet devices, with all exploitation campaigns originating from identical subnets,…

A dramatic 500% surge in suspicious network scans is targeting Palo Alto Networks login portals, with over 1,285 unique IPs…

GreyNoise Intelligence has launched an MCP Server to integrate real-time threat intelligence into AI-driven security operations, enabling faster decision-making and…

A significant surge in network scanning activity targeting Cisco ASA devices has been detected, with spikes in late August involving…

A critical vulnerability (CVE-2025-25256) in Fortinet's FortiSIEM platform allows unauthenticated attackers to execute arbitrary code, prompting urgent patching efforts due…

New research shows that 80% of sudden spikes in malicious activity (e.g., network scanning) precede the disclosure of security vulnerabilities…

A critical vulnerability (CVE-2025-5777) in Citrix NetScaler systems is being exploited, enabling session hijacking and unauthorized access despite Citrix's denial…