Latest articles
SOCRadar
October 2024 Patch Tuesday Update – Microsoft Fixes 117 Vulnerabilities, 2 Actively Exploited Zero-Days
[Update] October 22, 2024: “PoC Exploit Released for Critical WinReg Vulnerability (CVE-2024-43532)” Microsoft has released its October 2024 Patch Tuesday updates, addressing a total of 117 security vulnerabilities across various…
SOCRadar
Qualcomm Addresses Exploited Zero-Day and a Critical RCE in October 2024 Security Bulletin
Just yesterday, Qualcomm rolled out its latest monthly security bulletin, addressing numerous vulnerabilities, 5 affecting proprietary software and 15 related to open-source components. Of note, the advisory highlights one critical…
SOCRadar
FBCS Breach Exposes Millions, Comcast and Truist Bank Affected
In February 2024, Financial Business and Consumer Solutions (FBCS), a U.S.-based debt collection agency, experienced a significant data breach. Cybercriminals gained access to sensitive information stored within FBCS’s systems, affecting…
SOCRadar
CosmicSting (CVE-2024-34102) Vulnerability Under Active Exploitation
In a concerning development for e-commerce security, threat actors are actively exploiting a critical vulnerability in Adobe Commerce and Magento platforms, dubbed “CosmicSting”. Even though the vulnerability was detected earlier,…
SOCRadar
Foxit Reader Vulnerability (CVE-2024-28888): PoC Code Released, Patch to Prevent Attacks
Details and a Proof-of-Concept (PoC) exploit code for a serious vulnerability in Foxit Reader have recently emerged, raising concerns about its potential use in real-world cyberattacks. Tracked as CVE-2024-28888, researchers…
SOCRadar
RCE Vulnerability in Zimbra (CVE-2024-45519) Actively Exploited, Administrators Advised to Patch Immediately
Recently, Zimbra, a widely used email and collaboration platform, addressed a critical vulnerability in its postjournal service that allows unauthenticated users to execute commands on vulnerable systems. Identified as CVE-2024-45519,…
SOCRadar
CUPS Vulnerabilities: What You Need to Know
[Update] October 9, 2024: “Automated Scanner Released for CVE-2024-47176 in CUPS” [Update] October 4, 2024: “New Attack Vector in CUPS Exposes Over 58,000 Devices to DDoS Exploitation” Recent reports have…
SOCRadar
Critical Vulnerabilities in Pure Storage & Aruba Access Points Pose Unauthorized Access, RCE Risks
Security updates were released addressing critical vulnerabilities in both Pure Storage and Aruba Access Point systems. The Pure Storage updates include two vulnerabilities with the highest possible CVSS score of…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action