Latest articles
SOCRadar
Decryptors Available for the ESXiArgs Incidents and Cl0p Ransomware Variants
Researchers have developed decryptors for some recent ransomware operations. The specific ransomware operations use Cl0p ELF variants and the new variants of ESXiArgs ransomware . The incidents involving ESXiArgs are…
SOCRadar
1,200 Redis Servers Infected by New HeadCrab Malware for Cryptomining Operations
A new malware has appeared on the frontlines, targeting online Redis servers. The malware, named HeadCrab by researchers, has been active since September 2021. The malware’s primary goal is to…
SOCRadar
134M Exploit Attempts: Realtek RCE Vulnerability Targeted in Large-Scale Attacks
Threat actors stepped up their efforts to exploit a remote code execution vulnerability in the Realtek Jungle SDK between August and October 2022, according to researchers. A report from Palo…
SOCRadar
Yandex Code Repositories Leaked Allegedly by Former Employee
Yandex, a Russian technology company and popular search engine, has had its source code repositories leaked on a hacker forum. According to Yandex, the repositories were stolen by a former…
SOCRadar
VMware Patches Critical RCE Vulnerabilities in vRealize Log Insight
UPDATE (February 1, 2023): Proof-of-concept (PoC) code for a VMware vRealize Log Insight vulnerability chain has been made available by researchers. VMware patched several vulnerabilities found in its vRealize Log…
SOCRadar
Remote Code Execution Vulnerability in Microsoft Teams
Researchers discovered an RCE vulnerability in Microsoft Teams during Pwn2Own 2022. The application is used by a wide range of people, including professionals, and an exploit could cause significant harm…
SOCRadar
Attackers Exploit Fortinet Zero-Day CVE-2022-42475 with BoldMove Malware
Researchers have discovered a sophisticated new BoldMove malware created specifically to operate on Fortinet’s FortiGate firewalls after collecting data related to a recently disclosed zero-day vulnerability in the company’s FortiOS…
SOCRadar
PayPal Reveals Credential Stuffing Attack That Affected 35K Users
PayPal has disclosed that it was hit by a credential stuffing attack last month. The online payment platform notifies all users whose data has been compromised due to the attack. …
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action