Latest articles
SOCRadar
Sophos Firewall Patch Released for Actively Exploited Zero-Day RCE Vulnerability
Sophos released a patch for a flaw discovered in their firewall product . Tracked as CVE-2022-3236 (CVSS score: 9.8), the vulnerability allows code injection in the User Portal and Webadmin…
SOCRadar
A New Attack Wave Targeting Critical Magento Vulnerability
E-commerce platform Magento has become a frequent target for hackers. More attempts have been made to exploit CVE-2022-24086 since its proof-of-concept was made available. The critical vulnerability is present in…
SOCRadar
CISA Urges to Patch ManageEngine Against RCE Vulnerability
CISA has added a new critical vulnerability to its Known Exploited Vulnerabilities Catalog . The flaw exists in several ManageEngine products from Zoho and can lead to remote code execution…
SOCRadar
Python Flaw Unfixed for 15 Years: 350,000 Projects Deemed Vulnerable
A flaw in the Python tarfile module has gone unfixed for 15 years. 350,000 open-source projects are considered vulnerable. The flaw is tracked as CVE-2007-4559 ; it is a directory…
SOCRadar
Threat Actors Exploit Atlassian Confluence RCE Flaw to Install Crypto Miners
Unpatched Atlassian Confluence Server instances are vulnerable to a critical RCE flaw . The flaw, tracked as CVE-2022-26134 (CVSS score: 9.8), is actively exploited by hackers for crypto mining purposes…
SOCRadar
$162M Stolen from Digital Asset Trader Wintermute
Evgeny Gaevoy, the CEO of Wintermute, said earlier today that the company had been hacked and had lost $162.2 million in DeFi operations. The Profanity tool was used to create…
SOCRadar
Cobalt Strike Rolls Out an Update for XSS Vulnerability
Cobalt Strike 4.7.1 out-of-band update fixed an issue in version 4.7 that the affected users reported. There was no workaround for the problem. A vulnerability revealed soon after the 4.7…
SOCRadar
Highlights from SOCRadar Cyberwatch September Webinar
The first of SOCRadar’s Cyberwatch webinar series took place yesterday. Cyberwatch September, which covers significant cyber incidents , emerging threat actors, the most exploited vulnerabilities, and major cyber attacks worldwide,…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action