GreyNoise Intelligence, the cybersecurity company providing the most actionable intelligence on perimeter threats, today introduced the GreyNoise Global Observation Grid, the world’s largest and most sophisticated sensor network that monitors global attack traffic. With 5,000 sensors in 80 countries, the Global Observation Grid processes half a billion sessions per day. This ensures the most real-time, verifiable intelligence on internet scanning and exploitation.
Also Read:Â CoreWeave Launches NVIDIA GB200 Grace Blackwell Systems at Scale
“Despite heavy investments in network security, many organizations are still struggling to reduce their perimeter risk,” said Andrew Morris, Founder and Chief Architect, GreyNoise. “Automated scanning and exploitation generates massive volumes of security logs, making it ever more difficult for defenders to separate real security signals from the noise. Our Global Observation Grid provides comprehensive and actionable intelligence on internet scanning and exploitation to help defenders improve the signal-to-noise problem in security.”
Internet scanning and exploitation has become a pressing issue for enterprises and government agencies. Threat actors have developed mass reconnaissance capabilities that are largely automated. Over the last three years (2022-2025), u********** internet scanning has increased exponentially, along with the exploitation of edge devices through both new and resurgent vulnerabilities. The speed at which vulnerabilities have been exploited has also increased significantly over the last 5 years, with the time between vulnerability disclosure and first exploitation now happening in hours, rather than days or weeks.
By way of example, here are some key findings from the GreyNoise 2025 Mass Internet Exploitation Report:
- The most exploited vulnerability of 2024 targeted home internet routers, fueling massive botnets used in global cyberattacks, while simultaneously maintaining obfuscation.
- 40% of exploited vulnerabilities in 2024 were from 2020 or earlier, with some d***** back to the 1990s, highlighting the challenges with resurgent vulnerabilities.
- A surge in May 2024 was traced to 12,000+ hacked Android devices, showing that mobile threats are growing.
“More than 50% of the top breaches in the last 5 years were network-initiated attacks. The GreyNoise Global Observation Grid provides the most actionable threat intelligence that helps organizations manage their external attack surface.” said Ash Devata, CEO, GreyNoise Intelligence. “With our expanded architecture, we are able to provide real-time insights with verifiable proof of attacker activity targeting edge devices. This helps defenders improve the effectiveness of their SOC, prioritize the most urgent vulnerabilities to fix, and prevent reconnaissance and exploitation on their network.”
Also Read: How Network Tooling Impacts IT Professionals’ Job Performance and Satisfaction
With a global network of thousands of sensors in over 80 countries emulating thousands of edge device profiles, GreyNoise specializes in observing, analyzing, and classifying internet activity in real time. The GreyNoise Global Observation Grid tracks attacker behaviors by monitoring interactions between threat actors and its deception sensors. Unlike threat intelligence providers that collect data from traditional sources, GreyNoise’s threat intelligence is entirely generated from the interaction between attackers and these sensors. This ensures that the intelligence is always real-time and verifiable.
[To share your insights with us as part of editorial or sponsored content, please write to psen@itechseries.com]
