Latest articles
SOCRadar
Major Cyber Attacks in Review: December 2024
December 2024 saw a series of significant cyber attacks that targeted multiple industries, from healthcare to telecommunications. Ransomware groups like Black Basta and Cl0P exploited companies to steal sensitive data,…
SOCRadar
Ivanti Zero-Day Exploited in Connect Secure, SonicWall SSL VPN and SSH Vulnerabilities, KerioControl Flaw
[Update] February 17, 2025: “SPAWNCHIMERA Malware Actively Exploiting CVE-2025-0282” [Update] February 15, 2025: “Active Exploitation of SonicWall CVE-2024-53704” [Update] January 10, 2025: “Recent Findings Reveal UNC5337 Exploiting Ivanti ICS Vulnerabilities…
SOCRadar
Gravy Analytics Breach Puts Millions of Location Records at Risk and Highlights Privacy Threats
In an alarming security event, Gravy Analytics, a location data broker, has allegedly fallen victim to a major cyber breach. The breach, which has the potential to expose millions of…
SOCRadar
Turla Cyber Campaign Targeting Pakistan’s Critical Infrastructure
Among the most notorious cyber threat actors, the Turla group has garnered attention for its sophisticated and complex cyber attacks. Considered a state-sponsored actor, Turla has targeted governments, military institutions,…
SOCRadar
Black Basta’s Tactical Evolution: Deploying Zbot, DarkGate, and Bespoke Malware
In the ever-escalating landscape of cyber threats, Black Basta has emerged as a formidable ransomware group, continually adapting and refining its tactics to breach organizational defenses. This latest campaign underscores…
SOCRadar
Cerberus Unchained: The Multi-Stage Trojan Banking Campaign Targeting Android Devices
The Cerberus Android banking trojan has reemerged in a sophisticated multi-stage attack campaign targeting banking credentials, SMS data, and contact lists of Android users. Known for its stealthy overlay attacks,…
SOCRadar
The WarmCookie Malware Campaign: A Sneaky Threat Posed by Fake Browser Updates
The WarmCookie malware campaign poses a significant threat by deceiving users into downloading malicious software under the guise of legitimate browser updates. Disguised as critical updates for popular browsers like…
SOCRadar
Critical Vulnerabilities in Progress WhatsUp Gold (CVE-2024-12108, CVE-2024-12106); PoC Available for Oracle WebLogic Flaw
Three severe vulnerabilities have recently been uncovered in WhatsUp Gold, a well-known network monitoring solution by Progress Software, raising serious security concerns. These flaws could potentially allow unauthorized access to…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action