News

In early August 2025, researchers from GreyNoise first observed a significant spike in brute-force attacks against Fortinet ...
A massive spike in brute-force attacks targeted Fortinet SSL VPNs earlier this month, followed by a switch to FortiManager, ...
If there's smoke? Fortinet warned customers about a critical FortiSIEM bug that could allow an unauthenticated attacker to ...
Coordinated brute-force attacks hit Fortinet SSL VPNs and FortiManager, involving 780+ malicious IPs from U.S., Canada, ...
GreyNoise and Sekoia warn  Thousands of ASUS routers have been  compromised with persistent backdoors in what appears to be a ...
Spikes in attacker activity often precede new cyber vulnerabilities. In 80 percent of cases we analyzed, significant spikes ...
GreyNoise’s analogous whitelist data set, known as RIOT, enables the ThreatBlockr platform to monitor 60 million known good IP addresses and reduces the risk of false positives.
GreyNoise first discovered the campaign March 18, 2025, using its AI-powered network analysis tool, Sift. The system flagged anomalous HTTP POST requests targeting internet-facing Asus routers ...
GreyNoise has been tracking the attack since March 17. In the months since, they’ve seen only 30 requests related to the attack, which indicates how quietly the campaign is operating.
GreyNoise, a threat monitoring company, has discovered a botnet named AyySSHush. According to Censys search, there are more than 8,000 infected hosts, and thousands of these are ASUS routers.
While GreyNoise has made no attribution, the level of tradecraft suggests a well-resourced and highly capable adversary." Also: Your old router could be a security threat – here's why and what to do ...
Greynoise notes that exploitation of these two flaws can lead to complete camera takeover, infection with bots, pivoting to other devices connected on the same network, or disruption of video feeds.