2026 GreyNoise Report Reveals New Exploitation Patterns

The 2026 GreyNoise State of the Edge Report indicates that over half of the most dangerous exploitation attempts against internet-facing infrastructure originated from IPs with no prior history in GreyNoise data. The analysis covered 2.97 billion malicious sessions over 162 days in the second half of 2025, highlighting significant gaps in edge defense strategies, particularly for remote code execution attacks.