TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

GreyNoise

New Exploitation Surge: Attackers Target ThinkPHP and ownCloud Flaws at Scale

2025-02-11 · Read original ↗

ATT&CK techniques detected

2 predictions
T1587.004Exploits
62%
"? - how many other actively exploited vulnerabilities are slipping through the cracks? what we ’ re seeing : surging exploitation activity greynoise has observed a rapid increase in exploit attempts for both vulnerabilities over the past 10 days. observed exploitation attempts fo…"
T1190Exploit Public-Facing Application
53%
"##3 - 49103 ( owncloud graphapi ) - still under attack - an information disclosure vulnerability affecting owncloud / graphapi 0. 2. x before 0. 2. 1 and 0. 3. x before 0. 3. 1. - added to cisa kev in november 2023, reinforcing its status as a known exploited vulnerability. - gre…"

Summary

GreyNoise has detected a surge in exploitation attempts for two vulnerabilities—one flagged as a top target by government agencies and another flying under the radar despite real-world attacks. See the latest exploitation trends and why real-time intelligence is essential for risk management.