GreyNoise's 2026 State of the Edge Report is here!A key finding: 52% of remote code execution attempts in H2 2025 came from IPs appearing in GreyNoise for the first time. GreyNoise detected them the moment they showed up. Here's what else stood out.- Palo Alto GlobalProtect absorbed 16.7 million sessions, more than 3.5x Cisco and Fortinet combined. Whether it reflects available tooling, exposed attack surface, or targeted campaigns, this disproportionate concentration warrants investigation.- A ...

Greynoise Intelligence

In early days of GreyNoise Intelligence I used to pitch lots of people. One day at Blackhat or Defcon I was pitching someone and they interrupted me with: "Stop telling me how it works. Tell me what problem you're solving".I was offended because I had poured my heart and soul into this incredible technology, but they were right! The nerds care how it works, but the buyers and users just care about what problem it can solve for them. The problem doesn't care how it's solved, it just wants to be s ...

Greynoise Intelligence

Our latest GreyNoise research is out — the 2026 GreyNoise State of the Edge Report, covering H2 2025.The finding that keeps coming up in every conversation: 52% of remote code execution attempts came from IPs with no prior history in GreyNoise data 😮. More than half of the most dangerous exploitation hitting internet-facing infrastructure came from IPs with no prior history in GreyNoise data — infrastructure that may not appear on reputation feeds until after the exploitation attempt.But one ch ...

Greynoise Intelligence