Latest articles
SOCRadar
ClickFix Campaign: Fake Google Meet Alerts Spread Malware Across Windows and macOS
The ClickFix campaign represents a sophisticated use of social engineering to deploy malware across both Windows and macOS platforms. By leveraging fake Google Meet error messages, attackers entice users to…
SOCRadar
Water Makara Campaign: A Sophisticated Spear-Phishing Attack on Brazilian Enterprises
The Water Makara campaign is a highly sophisticated spear-phishing attack aimed specifically at Brazilian organizations. This operation, driven by obfuscated JavaScript, delivers the Astaroth malware to compromise systems undetected. An…
SOCRadar
Chinese State-Sponsored Threat Actors Breach U.S. Treasury Department in Major Cybersecurity Incident
[Update] January 7, 2025: “CISA Provides Update on U.S. Treasury Breach” Chinese state-sponsored threat actors have once again targeted a critical U.S. institution, this time breaching the Treasury Department in…
SOCRadar
Four-Faith Routers Exploited Through CVE-2024-12856 Vulnerability
A newly discovered vulnerability, tracked as CVE-2024-12856, is actively being exploited in Four-Faith routers. This vulnerability allows attackers to remotely control affected devices by establishing reverse shells, posing significant risks…
SOCRadar
Phishing Attack Compromises Cyberhaven’s Chrome Extension, Impacts Thousands – What You Need to Know
[Update] January 2, 2025: “New Details on the Chrome Extension Phishing Attack” A significant cyber attack struck just recently, when Cyberhaven, a well-known cybersecurity firm, disclosed that its Chrome extension…
SOCRadar
Severe Vulnerability in Palo Alto Networks PAN-OS Exposes Firewalls to Denial of Service (CVE-2024-3393)
[Update] December 31, 2024: CVE-2024-3393 has been added to the CISA KEV catalog* Palo Alto Networks recently identified a significant vulnerability, CVE-2024-3393, in its PAN-OS software. The flaw affects the…
SOCRadar
DarkVision RAT: A Persistent Threat Delivered via PureCrypter
The DarkVision RAT malware campaign leverages the PureCrypter loader to infiltrate networks and compromise data across multiple sectors. Distributed through various phishing techniques and utilizing advanced obfuscation, DarkVision RAT exemplifies…
SOCRadar
Severe Path Traversal Vulnerability in Adobe ColdFusion (CVE-2024-53961), Update Now
A critical vulnerability in Adobe ColdFusion versions 2023 and 2021 has prompted urgent security updates. Alarmingly, a Proof-of-Concept (PoC) exploit is already circulating, putting organizations at risk of immediate exploitation.…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action