Latest articles
SOCRadar
CVE-2025-54948 & CVE-2025-54987: Trend Micro Apex One Exploited for RCE
Trend Micro has recently disclosed two critical vulnerabilities, CVE-2025-54948 and CVE-2025-54987, affecting its Apex One on-premise platform. These security flaws could allow unauthenticated attackers to execute remote code on unpatched…
SOCRadar
Akira Exploits SonicWall SSLVPN in Suspected Zero-Day Attacks
[Update] Surge in Exploitation of CVE-2024-40766 by Akira [Update] SonicWall Links Attacks to CVE-2024-40766, Not a Zero-Day A string of high-severity cyberattacks is currently targeting SonicWall’s Gen 7 firewall appliances,…
SOCRadar
Critical OAuth2-Proxy Vulnerability (CVE-2025-54576) Lets Attackers Bypass Authentication
A security flaw has been found in OAuth2-Proxy, a tool that helps secure web applications using OAuth2 or OIDC authentication. Tracked as CVE-2025-54576, this vulnerability has been given a CVSS…
SOCRadar
June 2025: Qantas, 23andMe, Zoomcar, and Coinbase Breaches Lead Impact
June 2025 witnessed a wave of impactful cyber incidents spanning government agencies, critical infrastructure, healthcare, and major enterprises. From ransomware attacks and insider-driven data leaks to dark web re-uploads of…
SOCRadar
Critical SonicWall SMA Vulnerability CVE-2025-40599: What You Need to Know
SonicWall has disclosed a critical vulnerability in its SMA 100 series remote access devices, tracked as CVE-2025-40599. This issue carries significant risk, particularly for organizations relying on these systems for…
SOCRadar
What Happened to XSS.is? Everything You Need to Know About the Forum Takedown
This week, authorities made a major move against the cybercrime underground. After years of investigation, the suspected admin of XSS.is, one of the most active Russian-speaking hacker forums, was arrested…
SOCRadar
ToolShell Campaign: New SharePoint Zero-Day (CVE-2025-53770) Triggers Widespread Exploitation
[Update] October 5, 2026: Warlock Continues Using SharePoint Flaws to Deploy Ransomware [Update] October 23, 2025: Broader Exploitation of ToolShell Vulnerability by Chinese Threat Actors [Update] August 5, 2025: 4L4MD4R…
SOCRadar
CVE‑2025‑37103: Remote Access Risk in Aruba Instant On Access Points Due to Hardcoded Passwords
HPE has disclosed a critical vulnerability in Aruba Instant On access points. The flaw involves a hardcoded admin password that allows remote access to the device’s web interface without authentication.…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action