Latest articles
SOCRadar
Severe QNAP NAS Zero-Day Flaws Patched After Pwn2Own 2025: What You Should Know
QNAP has released security updates addressing seven zero-day vulnerabilities discovered and demonstrated during Pwn2Own Ireland 2025. The flaws affect QTS, QuTS hero, and several QNAP applications, including Hyper Data Protector,…
SOCRadar
Chrome Security Update Fixes High Risk WebGPU and V8 Flaws (CVE-2025-12725, CVE-2025-12726, CVE-2025-12727…)
Google has pushed a new Chrome Stable Channel update (142.0.7444.134/.135) for Windows, macOS, and Linux, addressing five security vulnerabilities, three of which are rated high severity in core browser components like WebGPU, Views, and…
SOCRadar
Coordinated Hacktivist Threat Activity Targeting Belgium
A coalition of eight hacktivist threat groups with pro-Russian and pro-Palestinian affiliations has announced a campaign targeting Belgium’s internet infrastructure. Although no further statements have been issued since the initial…
SOCRadar
CISA Adds Lanscope Endpoint Manager Zero-Day (CVE-2025-61932) to Known Exploited Vulnerabilities
[Update] Bronze Butler Exploits CVE-2025-61932 to Deploy Gokcpdoor Malware A recently discovered zero-day flaw in Lanscope Endpoint Manager is under exploitation, prompting immediate alerts from its developer Motex, as well…
SOCRadar
SessionReaper (CVE-2025-54236): Critical Adobe Commerce Vulnerability Actively Exploited
A new wave of attacks is targeting online stores running Adobe Commerce. Weeks after Adobe released a critical update, threat actors have begun exploiting a flaw called SessionReaper (CVE-2025-54236). This…
SOCRadar
131 Malicious Chrome Extensions Abused WhatsApp Web in a Massive Spam Campaign
Browser extensions are increasingly being weaponized as scalable attack tools. In early 2025, researchers uncovered a major campaign involving 131 malicious Chrome extensions abusing WhatsApp Web for bulk spam distribution.…
SOCRadar
September 2025: Record DDoS Attacks, Salesforce Records Theft, $130M Fintech Fraud & Ransomware Disruption at JLR
September 2025 marked one of the most consequential months of the year for global cybersecurity, defined by record-breaking DDoS activity, large-scale SaaS supply chain breaches, and mounting financial and manufacturing…
SOCRadar
BlackStink: How a Fake Chrome Extension Is Changing Banking Malware
The cybersecurity landscape is changing fast. While traditional banking malware relied on trojans and executable payloads, the BlackStink campaign represents a major evolution: attackers now weaponize the browser itself. Revealed…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action