Latest articles
SOCRadar
Critical Vulnerability in vm2 JavaScript Sandbox Library: Exploit Code Available
[April 19, 2023] Update: Added subheading: “Patches Released for New Vulnerabilities: CVE-2023-29199 and CVE-2023-30547.” The vm2 library’s author recently released a patch for a critical vulnerability that affects all previous…
SOCRadar
Cisco Releases Patches for Vulnerabilities in Multiple Products
Cisco, this week released updates to fix various security vulnerabilities in its products. These updates also cover serious issues affecting Secure Network Analytics and Identity Services Engine (ISE) products. The…
SOCRadar
New Rorschach Ransomware: The Fastest Encryptor
Researchers have discovered a new ransomware strain called Rorschach . This sophisticated and fast form of malware was used to target a company based in the United States. Rorschach is…
SOCRadar
Hackers Exploit WinRAR SFX Archives to Install Backdoors Undetected
Threat actors exploit WinRAR self-extracting (SFX) archives containing decoy files by adding malicious functionality to install backdoors in target systems without detection. SFX archives involve a decompressor stub allowing users…
SOCRadar
Attackers Actively Exploit Vulnerabilities in Unpatched Products: Zimbra, IBM Aspera Faspex, Cacti, Realtek
Threat actors are actively exploiting security vulnerabilities in Zimbra, IBM Aspera Faspex, Cacti, and Realtek products. Respective vendors have previously fixed the vulnerabilities used in attacks and have varying CVSS…
SOCRadar
Misconfigured Azure Active Directory (AAD) Could Lead to Unauthorized Access and Bing Takeover
Recently, cybersecurity company Wiz discovered a misconfiguration issue in Azure Active Directory (AAD) that resulted in unauthorized access to several applications, which could have also led to a Bing.com takeover.…
SOCRadar
AlienFox Toolkit Targets Cloud Web Hosting Frameworks to Steal Credentials
Cybercriminals are using a new toolkit called AlienFox to steal login credentials and sensitive data from cloud-based email services by scanning for misconfigured servers. The toolkit is available for purchase…
SOCRadar
SmoothOperator Supply Chain Attack Targeting 3CX VOIP Desktop Client
[Update] June 21, 2023: Researchers found exposed Elasticsearch and Kibana instances of a third-party vendor of 3CX. Find under the subheading: “3CX Third-Party Exposes Elasticsearch and Kibana Instances.” [April 24,…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action