GreyNoise

Reported Context (2)

On Sept. 24, threat detection firm GreyNoise Intelligence observed a single US-based IP address scanning for Citrix NetScaler installations and conducting remote code execution (RCE) attacks. The company issued alerts Citrix and Kiteworks Incidents Highlight Challenges of Zero-Day Response
🖨️ PaperCut’s AI attack swarm: GreyNoise traced 400+ compromised print-management instances; attackers reached domain admin at 12 organizations. Security Roundup: AI-Assisted Intrusions, Exploited Flaws and Industry Moves

CVE (19)

Malware (1)

People (14)

Threat Actors (3)

Vendors (16)

Products (29)

Tools (1)

Industries (4)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.