Latest articles
SOCRadar
Old Cisco ASA Vulnerability (CVE-2014-2120) Fuels Androxgh0st Botnet Activity
Cisco has issued a fresh warning regarding CVE-2014-2120, a decade-old vulnerability in its Adaptive Security Appliance (ASA). Despite its medium severity with a CVSS score of 4.3, the vulnerability is…
SOCRadar
International Operation Dismantles MATRIX: A Sophisticated Encrypted Messaging Service
The importance of international collaboration in the fight against cybercrime has once again been demonstrated. MATRIX, an encrypted messaging platform long utilized by organized crime groups for illegal activities, was…
SOCRadar
Zyxel Firewalls Exploited for Ransomware Attacks; 20 Security Flaws Discovered in Advantech Access Points
[Update] December 4, 2024: Added details about CVE-2024-11667’s inclusion in CISA’s KEV Catalog.* New security vulnerabilities emerge daily, forcing organizations to continuously monitor their expanding attack surface to prevent exploitation.…
SOCRadar
RomCom Backdoor Attacks Use Zero-Day Exploits in Mozilla and Windows (CVE-2024-9680 & CVE-2024-49039)
Recent research has revealed how the RomCom cyber threat group exploited two zero-day vulnerabilities in Mozilla and Microsoft products to deploy their namesake backdoor. These vulnerabilities, CVE-2024-9680 and CVE-2024-49039, allowed…
SOCRadar
Critical QNAP Vulnerabilities in Notes Station 3 and QuRouter Demand Immediate Patching (CVE-2024-38645, CVE-2024-38643, CVE-2024-48860)
QNAP recently released multiple security advisories addressing a range of vulnerabilities, including three critical flaws with CVSS scores above 9.0. These vulnerabilities could enable unauthorized access, remote command execution, and…
SOCRadar
Perfctl Campaign Exploits Millions of Linux Servers for Crypto Mining and Proxyjacking
Linux servers, the backbone of countless organizations worldwide, have recently come under siege by a stealthy and highly evasive malware known as Perfctl. This malware campaign is proving to be…
SOCRadar
NodeStealer’s Evolution: A Growing Threat to Facebook Accounts and Beyond
NodeStealer, a Python-based infostealer, has resurfaced in a more dangerous form, raising the stakes for global cybersecurity teams. This malware, first identified in 2023, now has enhanced capabilities, making it…
SOCRadar
Financial Software Company Finastra Investigates Recent Security Incident
Finastra, a prominent financial services software provider, is currently investigating a cybersecurity incident that has raised concerns across the industry. The breach involves its Secure File Transfer Platform (SFTP), which…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action