Latest articles
SOCRadar
MOVEit Data Leak Exposes Employee Data of Amazon, HSBC & More – What You Need to Know
[Update] December 10, 2024: “Nam3L3ss Denies Cl0p Ties While Highlighting Avaddon’s 2020 Data on American Bank Systems” [Update] December 4, 2024: “Alleged Cl0p-Linked Leaks Continue with Release of Patient Records…
SOCRadar
489 Million Instagram Accounts Scraped and Listed for Sale on Dark Web
A recent post on a Dark Web hacker forum has sparked widespread concern, with a threat actor claiming to possess a massive dataset containing the personal details of Instagram users.…
SOCRadar
Critical Vulnerabilities in Cisco URWB and HPE Aruba Access Points (CVE-2024-20418, CVE-2024-42509)
In recent security updates, Cisco has addressed a maximum severity vulnerability affecting Unified Industrial Wireless Software for Cisco URWB (Ultra-Reliable Wireless Backhaul) access points—network devices widely used in industrial environments…
SOCRadar
SOCRadar Joins the Cyber Threat Alliance: Advancing Cybersecurity Through Collaboration
Collaboration is crucial to preventing cyber threats in today’s rapidly evolving cybersecurity landscape. We’re thrilled that SOCRadar has joined the Cyber Threat Alliance (CTA) as an Affiliate Member. This partnership…
SOCRadar
RISK:STATION (CVE-2024-10443) – Unpatched Synology Devices at Risk of RCE
Researchers have identified a zero-click vulnerability impacting Synology’s DiskStation and BeeStation devices, posing a significant risk to millions of users. Dubbed RISK:STATION and tracked as CVE-2024-10443, this flaw enables attackers…
SOCRadar
November 2024 Android Security Update Fixes Actively Exploited Vulnerabilities CVE-2024-43093, CVE-2024-43047
[Updated] November 8, 2024: “CISA Adds Android Vulnerability CVE-2024-43093 to KEV Catalog” Google recently rolled out the November 2024 Android security update, resolving 40 security vulnerabilities. Among these, two zero-day…
SOCRadar
LottieFiles Supply Chain Attack: Compromised npm Package Targets Cryptocurrency Wallets
LottieFiles recently disclosed a major supply chain attack affecting its open-source JavaScript library, lottie-player. This npm package, widely used by developers to embed animations on websites, was compromised, creating serious security…
SOCRadar
ServiceNow Now Platform Vulnerabilities Enable RCE and SQL Injection Risks (CVE-2024-8923, CVE-2024-8924) – Patch Now
ServiceNow’s Now Platform, known for its AI-driven tools that help business processes and increase productivity, recently encountered two critical vulnerabilities. These newly disclosed flaws (CVE-2024-8923 and CVE-2024-8924) pose serious risks to…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action