Latest articles
SOCRadar
CVE-2025-26399: Critical RCE in SolarWinds Web Help Desk Receives a Hotfix
Another critical security vulnerability has emerged in SolarWinds’ widely used Web Help Desk software. Marked with a near-maximum CVSS score of 9.8, the newly disclosed flaw opens the door for…
SOCRadar
CVE-2025-10035: Critical GoAnywhere MFT Vulnerability Could Lead to Command Injection
[Update] October 7, 2025: Added details on active exploitation of CVE-2025-10035 by Storm-1175 to deploy Medusa ransomware, following Microsoft’s latest confirmation. [Update] CVE-2025-10035 Added to CISA’s KEV Catalog Secure file…
SOCRadar
Heathrow Airport Cyberattack: What Happened, Who’s Affected, and What CISOs Should Know
[Update] October 22, 2025: Everest Group Claims Responsibility and Shares Alleged Proof of Collins Aerospace Breach [Update] September 23, 2025: BianLian Suspected in the Collins Aerospace Ransomware Attack A major…
SOCRadar
CVE-2025-10585: New Chrome V8 Zero-Day Exploited in the Wild
Google has released a security update for Chrome users, involving a serious vulnerability that is exploited in the wild. The flaw, identified as CVE-2025-10585, affects the V8 JavaScript and WebAssembly…
SOCRadar
Shai-Hulud npm Supply Chain Attack: What You Need to Know
In September 2025, the open-source ecosystem experienced a significant threat: the Shai-Hulud npm supply chain attack. Malicious packages were published on npm, harvesting developer credentials and spreading rapidly across projects.…
SOCRadar
August 2025: SaaS Supply Chain Breaches, Telecom Data Exposures, and Ransomware Campaigns
August 2025 saw a wave of high-impact cyber incidents affecting millions worldwide. SaaS supply chain threats dominated headlines, with the Salesloft Drift and Salesforce integration breaches exposing hundreds of organizations…
SOCRadar
RCE Risk in Cursor AI Code Editor When Opening Folders
Imagine opening a code project and instantly triggering a background script without touching a key or clicking “run.” That’s not a feature. That’s a security flaw. A recent discovery has…
SOCRadar
FinalDraft Malware: The Stealthy Threat Using Microsoft Services
Designed for covert, long-term espionage, FinalDraft malware masterfully blends into legitimate Microsoft services to avoid detection, making it a formidable challenge for defenders. What is FinalDraft Malware? FinalDraft is a…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action