Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Cyber News

Latest SOCRadar research and analysis on Cyber News: threat reports, advisories and practical guidance for security teams.

Latest articles

Akira Ransomware Targets SonicWall Vulnerability (CVE-2024-40766) – Immediate Patching Required SOCRadar

Akira Ransomware Targets SonicWall Vulnerability (CVE-2024-40766) – Immediate Patching Required

[Update] October 4, 2024: “Majority of SonicWall Devices Remain Unpatched for CVE-2024-40766, Patch Now!”  [Update] September 10, 2024: “CISA Adds Critical SonicWall Vulnerability to KEV Catalog” A recently patched SonicWall…

Critical Security Updates for Cisco Smart Licensing Utility & Key Veeam Products SOCRadar

Critical Security Updates for Cisco Smart Licensing Utility & Veeam Products

[Update] March 21, 2025: “Confirmed Exploitation Activity Surfaces: CVE-2024-20439 and CVE-2024-20440”  [Update] October 17, 2024: CISA adds actively exploited Veeam vulnerability (CVE-2024-40711) to KEV Catalog* [Update] October 11, 2024: “Veeam…

Telegram’s Uncertain Future: Hacktivist Reactions and the Potential Shift to New Platforms SOCRadar

Telegram’s Uncertain Future: Hacktivist Reactions and the Potential Shift to New Platforms

[Update] January 8, 2025: “Telegram’s Latest Transparency Report Highlights Increased Data Sharing” [Update] September 24, 2024: “Telegram Will Now Provide Some User Data”, “Migration Has Begun” Telegram is more than…

VMware Fusion Receives Fix for a Severe Code Execution Vulnerability, CVE-2024-38811 SOCRadar

VMware Fusion Receives Fix for a Severe Code Execution Vulnerability, CVE-2024-38811

Recently, Broadcom has addressed a significant security vulnerability in VMware Fusion. Tracked as CVE-2024-38811, the flaw bears high severity, and its exploitation could compromise critical systems. VMware Fusion is a…

Exploits Released for Critical Flaws in WhatsUp Gold and Jenkins, Patch Now (CVE-2024-6670, CVE-2024-43044) SOCRadar

Exploits Released for Critical Flaws in WhatsUp Gold and Jenkins, Patch Now (CVE-2024-6670, CVE-2024-43044)

[Update] September 13, 2024: “Exploitation Activity on Progress WhatsUp Gold Vulnerabilities: CVE-2024-6670 and CVE-2024-6671” Two recently patched vulnerabilities have garnered attention following the release of official Proof-of-Concept (PoC) exploits. These…

Pre-Auth RCE Vulnerability in Apache OFBiz (CVE-2024-38856) Is Under Active Exploitation, CISA Warns SOCRadar

Pre-Auth RCE Vulnerability in Apache OFBiz (CVE-2024-38856) Is Under Active Exploitation, CISA Warns

[Update] September 6, 2024: “New RCE Vulnerability (CVE-2024-45195) Discovered in Apache OFBiz, Patch Now” The Cybersecurity and Infrastructure Security Agency (CISA) has recently included a vulnerability in Apache OFBiz in…

Vulnerability in Python's pandas Library Awaits a Patch (CVE-2024-42992) SOCRadar

Vulnerability in Python’s pandas Library (CVE-2024-42992)

[Update] August 27, 2024: CVE has been marked “REJECT” in the CVE List. Find more information in the blog post. Python’s popular data analysis and manipulation library, pandas, was recently…

August 2024 Patch Tuesday Highlights: 89 CVEs, 6 Zero-Day Vulnerabilities Under Exploitation SOCRadar

August 2024 Patch Tuesday Highlights: 89 CVEs, 6 Zero-Day Vulnerabilities Under Exploitation

[Update] September 4, 2024: “Details of CVE-2024-38106 and PoC Exploit” [Update] August 20, 2024: “Lazarus Group Targets CVE-2024-38193 to Deploy Stealthy Rootkit” & “PoC Exploit Available for Windows Zero-Days, Enabling…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action