SOC & Automation

04
Apr
Rotating IPs Outpace Reputation: Why Static Blocklists Fail

Rotating IPs Outpace Reputation: Why Static Blocklists Fail

Collection BriefThreat IntelligenceGREYNOISE.IO Rotating IPs Outpace Reputation: Why Static Blocklists Fail Why it mattersFor CISOs, reliance on outdated IP
2 min read
03
Apr
VMware Launches vDefend for Zero‑Trust Lateral Security in VCF Kubernetes

VMware Launches vDefend for Zero‑Trust Lateral Security in VCF Kubernetes

7SecureCollection BriefCloud SecurityBLOGS.VMWARE.COM VMware Launches vDefend for Zero‑Trust Lateral Security in VCF Kubernetes Why it mattersAs enterprises
1 min read
03
Apr
Rotating IPs Nullify Reputation Scores, Threat Intel Must Evolve

Rotating IPs Nullify Reputation Scores, Threat Intel Must Evolve

7SecureCollection BriefThreat IntelligenceGREYNOISE.IO Rotating IPs Nullify Reputation Scores, Threat Intel Must Evolve Why it mattersA cleaner long-form article view
2 min read
02
Apr
Custom Article Styling Survives Ghost Migration, Reducing UI Spoofing Risks

Custom Article Styling Survives Ghost Migration, Reducing UI Spoofing Risks

7SecureCollection BriefThreat IntelligenceEXAMPLE.COM Custom Article Styling Survives Ghost Migration, Reducing UI Spoofing Risks Why it mattersA cleaner long-form article
1 min read
02
Apr
Ghost Fleet Scan Surge Floods Sensors with Hong Kong‑Based Noise

Ghost Fleet Scan Surge Floods Sensors with Hong Kong‑Based Noise

7SecureCollection BriefThreat IntelligenceGREYNOISE.IO Ghost Fleet Scan Surge Floods Sensors with Hong Kong‑Based Noise Why it mattersA cleaner long-form
2 min read
02
Apr
Ghost Fleet Scan Spike: Hong Kong IPs Lead Coordinated Probing

Ghost Fleet Scan Spike: Hong Kong IPs Lead Coordinated Probing

GreyNoise reported a sharp rise in low‑skill scanning activity tied to the Ghost Fleet campaign. Roughly half of the
1 min read
02
Apr
Hong Kong‑Based Scan Surge Signals Coordinated Reconnaissance Campaign

Hong Kong‑Based Scan Surge Signals Coordinated Reconnaissance Campaign

GreyNoise reported a sudden rise in previously unseen scanning IPs, with roughly 50 % of the traffic geolocated to Hong Kong.
1 min read
02
Apr
Hong Kong‑Based Scanners Flood GreyNoise, Signal Recon Before Real Attacks

Hong Kong‑Based Scanners Flood GreyNoise, Signal Recon Before Real Attacks

GreyNoise observed a sudden surge of scanning activity, with roughly 50% of the new source IPs geolocated to Hong Kong.
1 min read
31
Mar
GPT‑4 Prompt Abuse Injects Hidden Backdoors into CI/CD Pipelines

GPT‑4 Prompt Abuse Injects Hidden Backdoors into CI/CD Pipelines

Security researchers have uncovered a new supply‑chain attack vector where threat actors feed carefully crafted prompts to GPT‑4.
1 min read
25
Mar

SSH/Telnet Scan Spike Reveals New Port Probes — Defenders Must Act

The ISC Stormcast for March 25 2026 recorded a sharp rise in automated scans against SSH (port 22) and Telnet