Latest articles
SOCRadar
Malicious Python Packages Steal AWS Keys
Cybersecurity researchers have discovered that some Python packages available in the PyPI repositories engage in malicious activity. Malicious packets send some sensitive data, including AWS login credentials, to internet-facing endpoints.…
SOCRadar
Threat Actors Target VMware Servers by Exploiting Log4Shell Vulnerability
The Log4Shell RCE vulnerability with code CVE-2021-44228 continues to be exploited by state-backed threat actors. Attackers utilize the vulnerability to target VMware Horizon and Unified Access Gateway servers. By exploiting the…
SOCRadar
NTLM Relay Attack Leads to Windows Domain Takeover
A new DFSCoerce NTLM Relay attack has been discovered on Windows. Threat actors can take over Microsoft Active Directory Certificate Services (AD CS) domains using MS-DFSNM (Microsoft Distributed File System…
SOCRadar
SOCRadar Exhibiting Extended Threat Intelligence Solution at InfoSecurity Europe 2022
SOCRadar will be at InfoSecurity Europe, held at London ExCel this week from 21 to 23 June. We are very excited to meet you face to face at our booth…
SOCRadar
BRATA Malware Becomes an Advanced Threat
Originally a banking trojan , BRATA acquires new capabilities and becomes a more advanced threat. Malware can now be much more effective at stealing user information . Cleafy’s analysis shows…
SOCRadar
DriftingCloud APT Group Exploits Zero-Day In Sophos Firewall
Cybersecurity researchers have revealed that Sophos Firewall has been actively exploited by DriftingCloud APT group since early March. Apparently, the attacks started long before the CVE-2022-1040 vulnerability was patched, affecting…
SOCRadar
Cisco Fixed Critical Authentication Bypass Vulnerability Affecting Some Products
Cisco fixed a vulnerability discovered in the external authentication functionality of Secure Email and Web Manager. The vulnerability could allow threat actors to bypass authentication and log on to the…
SOCRadar
Microsoft June 2022 Patch Tuesday Fixes 55 Vulnerabilities Including Follina
Microsoft has released the June 2022 Patch Tuesday . The company announced that it had patched 55 vulnerabilities, including the CVE-2022-30190 vulnerability, nicknamed Follina, which affects Office products. Among the…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action