Latest articles
SOCRadar
September 2025 Patch Tuesday: 2 Zero-Days (CVE-2025-55234 & CVE-2024-21907), 81 Microsoft Flaws
Microsoft has released its September 2025 Patch Tuesday updates, addressing 81 vulnerabilities across its ecosystem, eight of which are rated critical. Two zero-day vulnerabilities have also been highlighted this month…
SOCRadar
Massive npm Supply Chain Attack Exposes Millions to Crypto-Stealing Malware
Yesterday, researchers issued a warning about a major npm supply chain attack that has disrupted the JavaScript ecosystem. Attackers compromised widely used packages such as chalk, debug, and ansi-styles, injecting…
SOCRadar
CVE-2025-53690: Sitecore Deployments Targeted via WEEPSTEEL Malware
Organizations running older Sitecore deployments are now in the crosshairs of attackers exploiting a newly disclosed security issue, tracked as CVE-2025-53690. What makes this case especially concerning is that it…
SOCRadar
Salesloft Drift Breach: Everything You Need to Know
[Update] September 8, 2025: “Salesloft’s Official Update: GitHub Breach Led to Drift Token Theft” In August 2025, Salesloft’s Drift chatbot service became the conduit for one of the largest SaaS…
SOCRadar
September 2025 Android Security Bulletin Highlights Exploited Flaws: CVE-2025-38352 & CVE-2025-48543
Google has published the September 2025 Android Security Bulletin, which includes a wide set of fixes across core and vendor components. Notably, two vulnerabilities, tracked as CVE-2025-38352 and CVE-2025-48543, are…
SOCRadar
CVE-2025-55177: Zero-Click WhatsApp Exploit Leveraged in Targeted Spyware Attacks on Apple Devices
[Update] October 1, 2025: Researchers Trigger the WhatsApp Zero-Click Exploit Chain (CVE-2025-55177 and CVE-2025-43300) Security researchers have uncovered a significant vulnerability in WhatsApp that may have been actively exploited in…
SOCRadar
CVE-2025-7775: Citrix Zero-Day Exploit Hits NetScaler Devices
A newly discovered zero-day vulnerability in Citrix NetScaler devices, tracked as CVE-2025-7775, is already being exploited in the wild, prompting federal agencies and enterprise defenders to act fast. What’s at…
SOCRadar
CVE-2025-9074: Docker Desktop Vulnerability Allows Host Compromise
Containers are designed to provide isolation, but a newly disclosed flaw shows just how fragile that boundary can be when misconfigurations slip through. A critical vulnerability in Docker Desktop, tracked…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action