Latest articles
SOCRadar
Gigabyte Firmware Code Injection: Persistent Backdoor Leads to Supply Chain Risks
Researchers have expressed concerns about the UEFI firmware found in numerous motherboards by Gigabyte , a PC hardware manufacturer. They discovered that the firmware injects executable code into the Windows…
SOCRadar
Attackers Exploit Critical Zero-Day Vulnerability in MOVEit Transfer
[Update] July 18, 2023: A notorious cybercrime group’s MOVEit attack has affected 340 organizations and over 18 million individuals. Added the subheading: “MOVEit Attack Impacts 340 Organizations, 18 Million Individuals.”…
SOCRadar
CVE-2023-33733 Vulnerability in ReportLab Allows Bypassing Sandbox Restrictions
A proof-of-concept (PoC) exploit and a technical write-up for a ReportLab vulnerability are now available. The vulnerability tracked as CVE-2023-33733 could allow an attacker to perform remote code execution (RCE).…
SOCRadar
Android Spyware SpinOk Affects Over 420M Installations on Google Play
Researchers have discovered a new Android trojan, and they track it as “SpinOk.” The trojan is distributed as an advertisement Software Development Kit (SDK) on Google Play Store and has…
SOCRadar
Exposed Forum Reveals RaidForums Database: 478K Members’ Details Leaked
A database for the infamous RaidForums has been made public. An administrator posted the database on a new hacking forum called “Exposed,” presenting threat actors and security researchers with valuable…
SOCRadar
Google’s New ZIP Domain Could Be Used for Phishing and Malware Attacks
Security researchers have found how attackers could potentially exploit the new ZIP TLD offered by Google. A new phishing toolkit uses the ZIP domain to appear legitimate and displays fake…
SOCRadar
Apache HTTP Server Vulnerability CVE-2023-25690: PoC Available
The Apache Foundation announced on March 7, 2023, that they had addressed CVE-2023-25690 in Apache HTTP Server 2.4.56. The fix, implemented on March 5, prevents control characters from being included…
SOCRadar
Luxottica Data Leak Exposes Over 70M Customers’ Data
Luxottica, the world’s largest eyewear company, has revealed that it was the victim of a major cyber attack . The attack exposed the personal information of over 70 million customers…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action