GreyNoise Intelligence Releases New Report Outlining How Cyber Threat Activity Precedes Vulnerability Disclosure

▤ Summary

GreyNoise Intelligence released a report showing spikes in scanning and exploit activity on edge devices often precede CVE disclosures. Analyzing 147.8 million sessions across its Global Observation Grid over 103 days, it found that more than half of activity surges were followed by a vendor-matched CVE disclosure within three weeks, with a median lead time of 11 days. That advance window gives defenders time to brief leadership, stage patches, harden exposed systems, and block associated IPs to reduce likelihood of later targeting. The report aligns with other industry research on exploitation preceding disclosure and offers operational guidance; download the full 'Ten Days Before Zero' report for details.

▦ Linked Companies

GreyNoise Intelligence

$1M to $5M