Latest articles
SOCRadar
BeyondTrust Security Incident — Command Injection and Escalation Weaknesses (CVE-2024-12356, CVE-2024-12686)
[Update] January 14, 2025: “CVE-2024-12686 Enters the KEV Catalog” BeyondTrust’s Privileged Remote Access (PRA) and Remote Support (RS) solutions have two vulnerabilities, CVE-2024-12356 and CVE-2024-12686, which have exposed organizations to significant cybersecurity risks.…
SOCRadar
Sophos Firewall Update Resolves RCE and Privilege Escalation Vulnerabilities (CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
Recent security patches for Sophos Firewall address several serious vulnerabilities, including two classified as critical. These flaws could lead to Remote Code Execution (RCE) or expose a privileged account, potentially…
SOCRadar
Critical Path Traversal in FortiWLM (CVE-2023-34990) Permits Code Execution; Next.js Auth Bypass (CVE-2024-51479)
Fortinet and the popular React framework Next.js have recently addressed serious security flaws, shining light on the recurrent risks in digital ecosystems. Among these, CVE-2023-34990 in FortiWLM stands out as…
SOCRadar
The Year of Takedowns: Significant Law Enforcement Operations of 2024
As 2024 comes to a close, the global fight against cybercrime has witnessed a series of groundbreaking law enforcement operations that highlight the importance of international collaboration, and proactive intelligence…
SOCRadar
Cleo File Transfer Vulnerabilities (CVE-2024-50623, CVE-2024-55956) – Cl0P’s Latest Attack Vector
[Update] April 8, 2025: “WK Kellogg Confirms Data Breach Tied to Cleo Exploits” [Update] February 25, 2025: “Cl0p Ransomware Expands Its Victim List with 183 Additional Organizations” [Update] February 10,…
SOCRadar
BadBox Malware Compromises 30,000 Devices in Germany
The German Federal Office for Information Security (BSI) has taken decisive action to stop the BadBox malware campaign, which affected over 30,000 Android IoT devices. BadBox, a sophisticated malware strain,…
SOCRadar
Major Cyber Attacks in Review: November 2024
November 2024 brought several high-profile cyber attacks that targeted critical sectors, including telecommunications, supply chain management, and healthcare. From disruptions at Blue Yonder affecting global supply chains to an emerging…
SOCRadar
Critical Ivanti CSA Auth Bypass (CVE-2024-11639) Patched Alongside Other High-Impact Flaws
Ivanti recently released critical security updates to address several high-impact vulnerabilities in its products, including the Cloud Services Appliance (Ivanti CSA), Connect Secure (ICS), and Policy Secure (IPS). These updates…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action