Latest articles
SOCRadar
TikTok Denies Allegations of a 2.05 Billion Record Data Breach
Popular social media platform TikTok rejected claims that it had been compromised by threat actors who claimed to have obtained access to an insecure cloud server . The denial comes…
SOCRadar
QNAP Fixes Zero-Day Recently Leveraged by DeadBolt Ransomware
The Taiwanese company QNAP cautions customers about DeadBolt ransomware attacks upon exploiting a zero-day vulnerability in Photo Station. QNAP detected the issue on September 3. The DeadBolt ransomware gang has…
SOCRadar
Major Cyberattacks in Review: August 2022
Threat actors did not stay idle in August, and as always, they continued their attacks on small or large companies, government organizations, and critical infrastructures that could disrupt daily life.…
SOCRadar
Attackers Targeting Banking Credentials: American Express and Google Play Users at Risk
Phishing has changed significantly over the past ten years, and scammers now have sophisticated tools to use fake emails and websites to access the banking information of unwary victims. These…
SOCRadar
1,800 Apps with Hardcoded AWS Credentials Show Supply Chain Risks
More than 1,800 mobile applications have hardcoded AWS credentials , according to Symantec , which has issued a warning about the possible risks of poor security measures. An analysis of…
SOCRadar
Spyware Firm Sold Android and iOS RCE Exploit for €8 Million
Intellexa , a spyware firm that originated in Greece, has entered the market recently. Its work is similar to Pegasus Spyware and offers RCE exploits for iOS and Android OS.…
SOCRadar
Malicious Chrome Extensions Could Affect More Than 1.4 Million Users
McAfee researchers discovered several malicious Google Chrome extensions. The total download count for the extensions is over 1.4 million . The extensions are capable of tracking and stealing browser activity…
SOCRadar
Critical RCE Vulnerability in the Atlassian Bitbucket Server and Data Center
Atlassian recently issued a security advisory to notify Bitbucket Server and Data Center users about a critical vulnerability. Labeled CVE-2022-36804 is a command injection flaw with a CVSS score of…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action