Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Cyber News

Latest SOCRadar research and analysis on Cyber News: threat reports, advisories and practical guidance for security teams.

Latest articles

Docker Fixed an AuthZ Bypass Flaw Leading to Privilege Escalation: CVE-2024-41110 SOCRadar

Docker Fixed an AuthZ Bypass Flaw Leading to Privilege Escalation: CVE-2024-41110

On July 23, 2024, Docker issued an advisory regarding a security vulnerability in the authorization plugins (AuthZ), used for access control. The vulnerability affects Docker Engine, as well as Docker…

Laravel Framework Affected by a New Critical Vulnerability (CVE-2024-40075): Patch Now SOCRadar

Laravel Framework Affected by a New Critical Vulnerability (CVE-2024-40075): Patch Now

A very critical vulnerability, designated as CVE-2024-40075, has emerged in the Laravel PHP framework. This flaw could allow attackers to execute arbitrary commands, read sensitive data, and perform further malicious…

Suspicious Domains Exploiting the Recent CrowdStrike Outage! SOCRadar

Suspicious Domains Exploiting the Recent CrowdStrike Outage!

[Update] July 23, 2024: “Researchers Warn of Phishing Scenarios Exploiting the CrowdStrike Outage by Cybercriminals”, “Exploiting Real Time Response (RTR) Module”, “Hacktivist Threat Group Handala Targets Israeli Organizations with Phishing…

CrowdStrike Update Causing Blue Screen of Death and Microsoft 365/Azure Outage SOCRadar

CrowdStrike Update Causing Blue Screen of Death and Microsoft 365/Azure Outage

[Update] August 7, 2024: “New Root Cause Analysis” [Update] July 19, 2024: “Official Statement from the CrowdStrike CEO and the Possible Phishing Scenarios” The tech world is now experiencing significant…

Critical Vulnerabilities in SolarWinds ARM, Serv-U, and Cisco SSM On-Prem, Secure Email Gateway Products SOCRadar

Critical Vulnerabilities in SolarWinds ARM, Serv-U, and Cisco SSM On-Prem, Secure Email Gateway Products

[Update] August 9, 2024: “Proof-of-Concept Exploit Available for CVE-2024-20419 Vulnerability” Technology giants SolarWinds and Cisco have recently released security advisories addressing several critical vulnerabilities in their product lines. These advisories…

Microsoft Fixes CVE-2024-38112 After Over a Year of Exploitation; Zero-Click Threat of CVE-2024-38021 SOCRadar

Microsoft Fixes CVE-2024-38112 After Over a Year of Exploitation; Zero-Click Threat of CVE-2024-38021

[Update] August 21, 2024: “Researchers Reveal Technical Details of CVE-2024-38021, Urge Reassessment of Severity” Microsoft’s most recent Patch Tuesday updates addressed a high-severity zero-day vulnerability that was known to be…

Major Cyber Attacks in Review: June 2024 SOCRadar

Major Cyber Attacks in Review: June 2024

June 2024 has been a whirlwind of significant cyber attacks targeting high-profile organizations worldwide. Following the ongoing Snowflake-related issues, the past month has seen cases such as a TeamViewer data breach…

July 2024 Patch Tuesday Fixes 139 CVEs, Actively Exploited Zero-Days; CISA Highlights Citrix Updates SOCRadar

July 2024 Patch Tuesday Fixes 139 CVEs, Actively Exploited Zero-Days; CISA Highlights Citrix Updates

[Update] September 17, 2024: “PoC Exploit Available for CVE-2024-38080 in Windows Hyper-V”  [Update] August 23, 2024: “PoC Released for CVE-2024-38054, Elevated Risk of Exploitation” [Update] July 11, 2024: “Proof-of-Concept Exploit…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action