Latest articles
SOCRadar
RCE Vulnerability in OpenSSH’s SSH-Agent Forwarding: CVE-2023-38408
SSH-Agent is a widely used program that holds private keys for public key authentication, providing a secure and convenient way to log in to remote machines using SSH. It is…
SOCRadar
Critical Zero-Day in Ivanti EPMM (Formerly MobileIron Core) Is Actively Exploited (CVE-2023-35078)
Ivanti, a U.S. IT software company, has resolved an actively exploited zero-day authentication bypass vulnerability identified as CVE-2023-35078. The vulnerability resides in Ivanti’s mobile device management software, previously known as…
SOCRadar
Critical Vulnerabilities in Atlassian and Apple Products: Apple Zero-Day Actively Exploited (CVE-2023-38606)
Atlassian and Apple have each promptly addressed critical vulnerabilities threatening their products, including an actively exploited zero-day bug. Atlassian’s updates tackled vulnerabilities in Atlassian Confluence Server, Data Center, and Bamboo…
SOCRadar
Zero-Days (CVE-2023-26077, CVE-2023-26078) in Atera Windows Installers
Recent revelations have exposed critical zero-day vulnerabilities in Atera Windows installers. Cyber attackers could potentially use these loopholes to launch privilege escalation attacks. To understand the severity of these vulnerabilities,…
SOCRadar
Google Partially Patches Cloud Build’s Critical Design Flaw: Bad.Build
Researchers discovered a critical security design flaw in Google Cloud Build, which they dubbed as “Bad.Build”. The design flaw could enable attackers to tamper with organizations’ code repositories and application…
SOCRadar
First-Known Targeted Open-Source Supply Chain Attacks Strike the Banking Sector
The cybersecurity threat landscape continues to witness new and sophisticated threats, and the banking sector is no exception. For the first time, the industry has been explicitly targeted by two…
SOCRadar
Fixed Critical Severity Vulnerabilities (CVE-2022-45788) in Schneider Electric EcoStruxure Products, Modicon PLCs, and PACs
In the realm of industrial control systems (ICS), vulnerabilities pose significant risks to critical infrastructure sectors worldwide. There are recently fixed critical severity vulnerabilities discovered in Schneider Electric’s EcoStruxure Products,…
SOCRadar
An Ongoing DDoS Campaign Targeting Sweden
Following an Islamophobic incident where the Qur’an was burned in Stockholm, Sweden, a new wave of cyber attacks, named #OpSweden, has emerged with significant distinctions from previous occurrences.The incident originated…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action