Latest articles
SOCRadar
CVE-2025-61757: Oracle Identity Manager Auth Bypass Flaw Added to CISA’s KEV
CISA recently added CVE-2025-61757 to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation. The listing highlights a critical flaw affecting Oracle Identity Manager – part of Oracle Fusion…
SOCRadar
CVE-2025-40601: SonicOS SSLVPN Buffer Overflow Leads to Firewall Crash Risk, Patch Available
SonicWall has disclosed a severe flaw affecting specific Gen7 and Gen8 firewalls. Identified as CVE-2025-40601, the issue is in the SonicOS SSLVPN service and allows a remote, unauthenticated attacker to…
SOCRadar
Scattered LAPSUS Hunters Escalate With New Channel and Gainsight Breach
Scattered LAPSUS$ Hunters (SLH) has returned to the spotlight with new claims, alleged leaks, and a new Telegram channel, signaling a sharp rise in aggression. The group presents itself as…
SOCRadar
Cl0p’s Oracle EBS Zero-Day Campaign: What We Know So Far
The Cl0p ransomware group has returned to the spotlight with a new wave of attacks that target Oracle EBS (E-Business Suite) zero-day vulnerabilities. The threat group has a long history…
SOCRadar
October 2025: Oracle Exploitation, Red Hat Incident, PhantomCaptcha, and Major Breaches
October 2025 brought forward a mix of high-impact data breaches, targeted intrusion campaigns, and continued activity from well-established threat groups. Several incidents involved extensive data exposure across government, healthcare, and…
SOCRadar
3.5 Billion WhatsApp Accounts Identified Through Enumeration
A recent study by IT-security researchers at the University of Vienna and SBA Research examines the ease of identifying WhatsApp users and the information the platform exposes. The findings show…
SOCRadar
Chrome V8 Zero-Day CVE-2025-13223 – Active Exploit Confirmed, Google Issues Security Fix
A fresh security update from Google has put Chrome users on alert. The company has patched two high-severity vulnerabilities in the browser’s V8 JavaScript engine, one of which (CVE-2025-13223) is…
SOCRadar
CVE-2025-58034: New FortiWeb Zero-Day Exploited, Enables OS Command Injection
[Update] FortiWeb’s CVE-2025-58034 Enters CISA’s Known Exploited Vulnerabilities Fortinet has issued a new advisory confirming that a recently identified FortiWeb vulnerability, now tracked as CVE-2025-58034, is being exploited in real-world…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action