Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Cyber News

Latest SOCRadar research and analysis on Cyber News: threat reports, advisories and practical guidance for security teams.

Latest articles

April 2025 Patch Tuesday: Microsoft Addresses 126 Vulnerabilities Including Actively Exploited CLFS Zero-Day SOCRadar

April 2025 Patch Tuesday: Microsoft Addresses 126 Vulnerabilities Including Actively Exploited CLFS Zero-Day

[Update] May 8, 2025: Play Ransomware Exploitation Linked to CVE-2025-29824 Microsoft’s April 2025 Patch Tuesday brings an extensive set of updates aimed at shoring up system defenses across its product…

April 2025 Android Update: Actively Exploited Kernel Bugs and Remote Privilege Escalation Threat SOCRadar

April 2025 Android Update: Actively Exploited Kernel Bugs and Remote Privilege Escalation Threat

Google has just released its April 2025 Android security bulletin, addressing a broad spectrum of vulnerabilities across its mobile operating system. Among the 62 issues patched, two kernel-level vulnerabilities –…

Storm-2372: Russian APT Using Device Code Phishing in Advanced Attacks SOCRadar

Storm-2372: Russian APT Using Device Code Phishing in Advanced Attacks

A newly uncovered cyber campaign led by the Russian state-backed group Storm-2372 is exploiting device code phishing to bypass Multi-Factor Authentication (MFA) and infiltrate high-value targets. This highly targeted tactic…

UNC5221 Targets Critical Ivanti Flaw (CVE-2025-22457) with TRAILBLAZE & BRUSHFIRE Malware SOCRadar

UNC5221 Targets Critical Ivanti Flaw (CVE-2025-22457) with TRAILBLAZE & BRUSHFIRE Malware

A recently disclosed critical vulnerability in Ivanti products, CVE-2025-22457, has drawn urgent attention across the cybersecurity community. The flaw, confirmed to be actively exploited in the wild, impacts widely used…

Everything You Need to Know About the Alleged Twilio SendGrid Breach SOCRadar

Everything You Need to Know About the Alleged Twilio SendGrid Breach

[Update] April 9, 2025: “Alleged Breach Expands Beyond SendGrid” On April 3, 2025, a threat actor operating under the alias Satanic announced on BreachForums that they were in possession of…

CrushFTP Vulnerability Under Active Exploitation (CVE-2025-31161): What You Need to Know SOCRadar

CrushFTP Vulnerability Under Active Exploitation (CVE-2025-31161): What You Need to Know

[Update] April 8, 2025: CISA Flags Actively Exploited CrushFTP Vulnerability (CVE-2025-31161) A newly discovered flaw in the CrushFTP file transfer platform is under active exploitation, with threat actors leveraging publicly…

Alleged Check Point Breach: What Happened and What You Need to Know? SOCRadar

Alleged Check Point Breach: What Happened and What You Need to Know?

[Update] April 2, 2025: “Latest Developments: Dissecting CoreInjection’s Claims and the Alleged Leak” On March 31, 2025, a threat actor known as CoreInjection claimed responsibility for a breach at Check…

Mozilla Responds to Critical Vulnerability: Urgent Firefox Update SOCRadar

Mozilla Responds to Critical Vulnerability: Urgent Firefox Update

In a rapid response to a similar vulnerability with Google Chrome, Mozilla has issued an update for its Firefox browser on Windows to address a newly discovered critical security vulnerability.…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action