TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

GreyNoise

Heightened In-The-Wild Activity On Key Technologies Observed On March 28

2025-04-01 · Read original ↗

ATT&CK techniques detected

2 predictions
T1190Exploit Public-Facing Application
88%
"heightened in - the - wild activity on key technologies observed on march 28 april 7, 2025 update after greynoise ’ s reporting of heightened activity targeting key technologies on march 28, we now observe on april 7 a significant rise in exploitation attempts against linksys e -…"
T1588.006Vulnerabilities
31%
"##emetry indicates a marked increase in in - the - wild activity targeting these systems. view real - time activity and block malicious ips by navigating to the greynoise visualizer ’ s cve search feature and pasting cves of interest. ivanti sonicwall zoho zyxel f5 linksys recomm…"

Summary

On March 28, GreyNoise observed a significant spike in activity targeting multiple edge technologies, including SonicWall, Zoho, Zyxel, F5, Linksys, and Ivanti systems. While some of these technologies are edge systems, others are primarily internal management tools.