Latest articles
SOCRadar
July 2025: Allianz, Qantas, M&S, Co-op Breaches, $140M Bank Hack & SharePoint 0-Day Exploits
From airlines and insurers to banks and retailers, July 2025 showed no sector was off-limits for cybercriminals. Attacks came through phone calls, poisoned code, stolen credentials, and zero-day exploits –…
SOCRadar
CVE-2025-20265: RCE Flaw in Cisco Secure Firewall FMC RADIUS Authentication
Cisco has disclosed a critical vulnerability affecting Secure Firewall Management Center Software, along with 28 additional flaws across its firewall product range. Published on August 14 in a series of…
SOCRadar
MadeYouReset: New HTTP/2 DoS Vulnerability Explained
A newly disclosed technique called “MadeYouReset” lets attackers coax HTTP/2 servers into resetting their own streams, slipping past many Rapid Reset defenses. Here’s how it works, who’s affected, and what…
SOCRadar
CVE-2025-25256: FortiSIEM Flaw Enables Unauthenticated RCE
A new critical vulnerability in Fortinet’s FortiSIEM platform is drawing urgent attention. With exploit code already circulating in the wild and the potential for full command injection without authentication, organizations…
SOCRadar
August 2025 Patch Tuesday: Microsoft Fixes 111 CVEs & Publicly Disclosed Kerberos Zero-Day (CVE-2025-53779)
[Update] “Post-Patch Findings on BadSuccessor (CVE-2025-53779)” Microsoft has rolled out its August 2025 Patch Tuesday updates, tackling 111 security flaws, including 13 rated as critical and one publicly disclosed zero-day…
SOCRadar
Salesforce-Related Data Breach Affecting Multiple Companies
[Update] August 12, 2025: “ShinyHunters Reopens Telegram Channel, Claims BreachForums Is Law Enforcement–Run” In mid-2025, a series of coordinated intrusions targeted the Salesforce environments of multiple high-profile companies across diverse…
SOCRadar
CVE-2025-8088: WinRAR Zero-Day Exploited in Targeted Attacks
A newly discovered zero-day vulnerability in the popular file archive tool WinRAR, tracked as CVE-2025-8088, has been actively exploited in targeted attacks across multiple sectors. The flaw has been linked…
SOCRadar
CVE-2025-53786: CISA Issues Emergency Directive for Critical Microsoft Exchange Hybrid Vulnerability
On August 7, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an Emergency Directive in response to a newly disclosed Microsoft Exchange Server vulnerability. The flaw, tracked as…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action