Latest articles
SOCRadar
Over 22,000 CyberPanel Servers at Risk from Critical Vulnerabilities Exploitation by PSAUX Ransomware
Threat actor’s have been actively exploiting three Remote Code Execution (RCE) vulnerabilities in CyberPanel, a popular web hosting control panel. The vulnerabilities, identified as CVE-2024-51567, CVE-2024-51568, and CVE-2024-51378, allow attackers…
SOCRadar
Global Cybersecurity Coalition Brings Down Major Infostealer Malware Operations
In a recent milestone for international cybersecurity, authorities from around the world successfully dismantled the Redline and Meta infostealer malware networks. Dubbed as Operation Magnus, orchestrated by Eurojust with Europol support, this…
SOCRadar
New Zero-Day Vulnerability in Windows Themes Threatens NTLM Security
A newly discovered zero-day vulnerability in Windows Themes files exposes users’ NTLM credentials, posing serious risks for remote credential theft. Despite Microsoft’s recent efforts to address similar vulnerabilities in theme…
SOCRadar
Free ISP Breach Compromises Millions, Threat Actor Threatens Data Leak
Free, a leading French ISP and subsidiary of Iliad Group, confirmed a major data breach on October 26, 2024, impacting millions of subscribers. This announcement followed a threat actor’s offer…
SOCRadar
Lazarus Exploits Google Chrome Zero-Day to Steal Cryptocurrency in ‘DeTankZone’ Campaign (CVE-2024-4947)
Earlier in 2024, the North Korean Lazarus APT group exploited a critical zero-day vulnerability in Google Chrome, tracked as CVE-2024-4947. This flaw was used in a deceptive campaign involving an…
SOCRadar
FortiManager Zero-Day ‘FortiJump’ Is Now Publicly Addressed (CVE-2024-47575)
[Update] November 18, 2024: “PoC Released for FortiJump Vulnerability (CVE-2024-47575)” [Update] October 25, 2024: “The Flaw Has Been Exploited Since June 2024, by Actors Now Tracked as UNC5820”, IOCs have…
SOCRadar
Roundcube Vulnerability (CVE-2024-37383) Exploited in Phishing Attacks Targeting Government Agencies for Credential Theft
A vulnerability in the popular open-source Roundcube Webmail, CVE-2024-37383, was observed to be exploited by threat actors to launch phishing attacks aimed at stealing user credentials. Although patched, this stored…
SOCRadar
ScienceLogic SL1 0-Day from Rackspace Breach Added to CISA KEV (CVE-2024-9537)
A critical security vulnerability was recently discovered in the ScienceLogic SL1 Portal (formerly EM7), exploited as a zero-day by attackers. The Cybersecurity and Infrastructure Security Agency (CISA) has recently added…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action