Latest articles
SOCRadar
SAP Fixes Critical Vulnerabilities in Commerce and Manufacturing Execution Products
SAP published its Security Patch Day document for October 2022. Five new high-severity security notes and one update, including three that address BusinessObjects information disclosure vulnerabilities and one that addresses…
SOCRadar
Aruba Released Patches for EdgeConnect’s Critical Vulnerabilities
Aruba released security updates to fix several critical vulnerabilities . The vulnerabilities were found in its popular WAN management tool, EdgeConnect Enterprise Orchestrator. Successful exploitation could let a remote attacker…
SOCRadar
Microsoft October Patch Tuesday Fixes Actively Exploited Zero Day and 13 Critical Flaws
Microsoft Patch Tuesday for this month fixes a total of 84 vulnerabilities, including an actively exploited zero-day flaw. All the vulnerabilities are high-severity, with 13 critical ones that could lead…
SOCRadar
Critical RCE Vulnerability with Max CVSS Score in VM2 Sandbox Library
A critical vulnerability in vm2 might let a remote attacker bypass the sandbox environment and execute shell commands on the device hosting the sandbox . To reduce the possibility that…
SOCRadar
What Do You Need to Know About Fortinet Critical Authentication Bypass Vulnerability (CVE-2022-40684)?
1. What are the CVE details and severity status of vulnerabilities? Last week, Fortinet patched a severe authentication bypass vulnerability . The company confirmed after the patch that the vulnerability is…
SOCRadar
BidenCash Carding Shop Returns With a Larger Credit Card Dump
[Update] May 17, 2023: BidenCash has started buying and selling SSH credentials. The marketplace is now offering related new services. Added the subheading: “BidenCash Shifts Operations, Selling SSH Access for…
SOCRadar
Unpatched RCE Vulnerability in Zimbra Actively Exploited
Threat actors actively exploit Zimbra Collaboration Suite in the wild due to an unpatched vulnerability. Tracked as CVE-2022-41352 (CVSS score: 9.8), the vulnerability allows remote code execution . The vulnerability…
SOCRadar
Eternity Threat Group Distributing Multifunctional LilithBot Malware
LilithBot, a multipurpose malware sample, was found by ThreatLabz. Further investigation indicated that malware was connected to the Eternity group (also known as EternityTeam or Eternity Project), a threat organization…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action