Latest articles
SOCRadar
Cloud Threat Actor Spotlight: GUI-vil’s Strategies in AWS Compromises
Researchers have been tracking a financially motivated threat group known as GUI-vil (aka p0-LUCR-1), based in Indonesia, which engages in unauthorized cryptocurrency mining . Researchers first observed this threat actor…
SOCRadar
IcedID Macro Attacks Deploy Nokoyawa Ransomware
Malicious actors frequently resort to alternative techniques to gain initial access, such as employing diverse file formats and payloads. It is important to highlight that they still actively use VBA…
SOCRadar
G7: Cybersecurity Reflections
The G7 Cybersecurity Summit 2023 is just around the corner and is being held in Hiroshima, Japan, which is a city that was devastated by an atomic bomb attack in…
SOCRadar
Vulnerability in KeePass Password Manager Permits Retrieving Master Password (CVE-2023-32784)
[Update] June 6, 2023: KeePass has fixed the CVE-2023-32784 vulnerability in version 2.54 . Attacks leveraging the vulnerability relied on how passwords were typed and how many were entered in…
SOCRadar
Network Devices Under Threat: Mustang Panda Targets TP-Link Routers, Critical Teltonika Vulnerabilities
The attacks targeting European foreign affairs entities since January 2023 have been attributed to a Chinese cyber espionage group, Mustang Panda. The attackers use a TP-Link firmware implant that contains a…
SOCRadar
Recent Data Breaches: Capita, Toyota, and Discord
[Update] June 6, 2023: Capita was previously unable to confirm whether hackers had exfiltrated any data. Some USS (Universities Superannuation Scheme) members claimed that their data was affected following the…
SOCRadar
Essential Addons for Elementor WordPress Plugin Allows Privilege Escalation (CVE-2023-32243)
A popular WordPress plugin called Essential Addons for Elementor has a security vulnerability, tracked as CVE-2023-32243, which could allow hackers to gain administrator privileges on affected websites. The plugin, which…
SOCRadar
Scammers Distribute Malware via Verified Account Ads on Facebook
Scamming campaigns frequently involve threat actors impersonating businesses or significant individuals. However, a recent trend of Facebook ad scams has been especially threatening, with scammers potentially infecting a large number…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action