Latest articles
SOCRadar
Cyber Security Aspect of the 2024 NATO Summit
[Update] July 11, 2024: “Washington Summit Declaration” The idea of building alliances was already important for increasing the security of kingdoms and lands way before the 20th century. After WWII, fostering…
SOCRadar
Critical HTTP File Server Vulnerability (CVE-2024-23692) Actively Exploited to Deploy Cryptomining Malware, RATs, Stealers
Researchers have identified active exploitation targeting a critical vulnerability in the HTTP File Server (HFS) to deploy cryptocurrency mining malware, Remote Access Trojans (RATs), backdoors, and infostealers. Known as CVE-2024-23692, this…
SOCRadar
Velvet Ant’s Strategic Targeting: A Long-Term Cyber Espionage Campaign Against F5 BIG-IP Systems
In the constantly evolving landscape of cybersecurity, the Velvet Ant Advanced Persistent Threat (APT) group, allegedly supported by the Chinese government, has emerged as a significant adversary. The Velvet Ant…
SOCRadar
New Security Vulnerability “regreSSHion” Exposes Millions of Linux OpenSSH Servers to RCE Attacks (CVE-2024-6387)
[Update] July 2, 2024: “PoC Exploit for regreSSHion Vulnerability (CVE-2024-6387) Surfaces on GitHub,” “Detect the regreSSHion Vulnerability (CVE-2024-6387)” A newly discovered security vulnerability, dubbed “regreSSHion” (CVE-2024-6387), puts millions of OpenSSH…
SOCRadar
GitLab Issues Critical Patches for CE/EE Alongside Fortra & MOVEit (CVE-2024-5655, CVE-2024-5276, CVE-2024-5805, CVE-2024-5806)
GitLab has rolled out new security updates for both its Community Edition (CE) and Enterprise Edition (EE), addressing one critical and three high-severity issues among over a dozen vulnerabilities. With…
SOCRadar
Polyfill Fuels Supply Chain Concerns with Malicious Redirects: +100,000 Websites Affected
Latest Update: “Polyfill Issue Affects +380,000 Hosts and Major Companies, With Ongoing New Domain Registrations” Researchers have issued a warning about a new supply chain attack originating from the Polyfill[.]io…
SOCRadar
VMware vCenter Server Updates Address Critical RCE and Privilege Escalation Vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081)
Broadcom has released a security update for its popular management platform, VMware vCenter Server, addressing several vulnerabilities of critical and high severity. The update, issued today, fixes vulnerabilities identified as…
SOCRadar
Microsoft’s June 2024 Patch Tuesday Highlights KeyTrap Zero-Day, Critical MSMQ Flaw; Windows LPE Exploit
[Update] December 24, 2024: “CVE-2024-30085 PoC Exploit Released, Immediate Action Required to Patch Windows Vulnerability” [Update] December 17, 2024: “CVE-2024-35250 Has Been Added to CISA KEV Catalog” [Update] October 15,…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action