Latest articles
SOCRadar
Ingress Nightmare: Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress-NGINX
On March 24, 2025, the Kubernetes Security Response Committee released a patch for a set of high to critical RCE vulnerabilities in the ingress-nginx controller putting over 6,500 clusters at…
SOCRadar
Everything You Need to Know About Oracle Cloud Security Incident by rose87168
[Update] April 2, 2025: “What are the Recent Developments?” [Update] April 9, 2025: “Oracle has reportedly begun notifying affected customers” rose87168 is the alias of a hacker who claims to…
SOCRadar
Arkana Ransomware Attack on WideOpenWest: What You Need to Know
A previously unknown threat actor has launched its first ransomware attack, marking a worrisome new chapter in the cyber threat landscape. This alarming incident involves Arkana, a previously unknown threat…
SOCRadar
Next.js Middleware Vulnerability (CVE-2025-29927): What You Need to Know and How to Respond
A critical security flaw has recently shaken the Next.js ecosystem, bringing urgent attention to the framework’s middleware feature. Tracked as CVE-2025-29927, this vulnerability potentially affects millions of applications built using…
SOCRadar
Critical Veeam Vulnerability (CVE-2025-23120) Enables Remote Code Execution by Domain Users
A newly discovered vulnerability in Veeam Backup & Replication, tracked as CVE-2025-23120, has emerged as a critical threat for enterprise environments. With a near-maximum CVSS score, this flaw enables authenticated…
SOCRadar
Windows Shortcut Zero-Day (ZDI-CAN-25373) Exploited by State-Backed Threat Actors Since 2017: Overview of Key Details
A sophisticated zero-day vulnerability, ZDI-CAN-25373, has been secretly exploited for years by multiple state-backed hacking groups, highlighting its critical security implications. This exploit takes advantage of Windows shortcut (.lnk) files,…
SOCRadar
Apache Tomcat RCE Vulnerability (CVE-2025-24813) Under Active Exploitation: Patch Now
A serious vulnerability in Apache Tomcat, CVE-2025-24813, is being actively exploited in the wild. This flaw allows attackers to take advantage of Tomcat’s request-handling mechanism, potentially leading to full server…
SOCRadar
Major Cyber Attacks in Review: February 2025
In February 2025, several major cyber incidents demonstrated ongoing threats to industries worldwide. The Qilin ransomware attack disrupted operations at Lee Enterprises, severely impacting media distribution. Meanwhile, the FBI attributed…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action