Latest articles
SOCRadar
DepositFiles Config File Exposes Multiple Databases: Users’ Privacy at Risk
DepositFiles, a well-known web hosting service, left its environment configuration file publicly accessible, leading to unauthorized access. A configuration file is a crucial component of any system, it holds essential…
SOCRadar
Android Vulnerabilities That Do Not Get Fixed Function as a Zero-Day
Maddie Stone of Google’s Threat Analysis Group (TAG) authored the fourth annual year-in-review of zero-day vulnerabilities that attackers exploited in the wild. The report builds upon the mid-year 2022 review.…
SOCRadar
Collective Security in Cyberspace with NATO
The North Atlantic Treaty Organization (NATO) is an intergovernmental military alliance formed to ensure collective defense and security for its member nations. Security concerns in today’s interconnected, digital world have…
SOCRadar
New Advanced Attack Technique Exploiting “search-ms” URI Protocol Handler
The Windows operating system boasts a robust search feature for locating files and folders; there also is a less-known element, “search-ms” URI protocol handler. The handler enhances local searches and…
SOCRadar
Nitrogen: A Malware Campaign Leveraging Search Ads
Researchers have uncovered a new initial access malware campaign dubbed “Nitrogen”. This campaign employs Google and Bing search ads to promote fake software sites. The primary objective of the Nitrogen…
SOCRadar
The Phishing Risks of Twitter’s Name Change to X
In today’s digital playground, social media swings both ways, offering a fun-filled space for individuals to connect and share, while also serving as a dynamic B2B carousel, where businesses can…
SOCRadar
Russia-Linked APT Group Gamaredon Starting Extortion 30-50 Minutes After First Initial Access
The threat group, Gamaredon, linked to Russia, has been observed engaging in data exfiltration activities shortly after gaining initial access to targeted systems. The Computer Emergency Response Team of Ukraine…
SOCRadar
VMware Responses to the Critical CVE-2023-20891 Vulnerability Exposing CF API Admin Credentials
Virtual machines have revolutionized the world of cybersecurity, offering a myriad of benefits to cybersecurity professionals. They enable professionals to simulate real-world attack scenarios, conduct vulnerability testing, and analyze malware…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action