GreyNoise analyzes Internet background noise. Use GreyNoise to remove pointless security alerts, find compromised devices, or identify emerging threats.
(Yes, it's really us. - Love, GreyNoise )
GreyNoise is heading to Barcelona for #FalCon Europe!
Stop by Booth #211 to see how GreyNoise integrates with CrowdStrike Falcon to cut through alert noise and surface what actually matters.
Discover ways to engage: https://info.greynoise.io/events/fal.con-europe-2026
info.greynoise.ioGreyNoise at Fal.Con Europe 2026Engage with GreyNoise at Fal.Con Europe 2026. Stop by our booth #211, meet with us, or attend our event.
GreyNoise is monitoring exploitation attempts against #php2shell (CVE-2026-109618 and CVE-2026-109619).
On 28 Oct 2026, 05:14:01 UTC we observed the first successful exploitation of php2shell against a vulnerable GreyNoise sensor.
"We’re seeing successful exploitation of these CVEs, but the conditions make it difficult for a threat actor to scale. Fifty different servers in various configurations can be vulnerable to these CVEs, but the same exploit may not work universally against all of them. Actors need to tailor their exploit for each respective configuration which makes mass exploitation challenging."
- Andrew Thompson, SVP of Adversary Operations at GreyNoise
This live activity report is derived from GreyNoise data and updates as we observe new activity: https://php.events.greynoise.io/
