Latest articles
SOCRadar
Major Cyber Attacks in Review: May 2024
May 2024 saw several major cyber attacks across diverse sectors, including cryptocurrency, cloud services, and online archives. Notable incidents include the $308 million cryptocurrency heist from DMM Bitcoin, significant data…
SOCRadar
Malvertising Campaign Targets Windows Administrators Using PuTTy and WinSCP
An AI illustration of the malvertising campaign using PuTTy and WinSCP In the ever-evolving landscape of digital security, cyber threats are continually adapting and becoming more sophisticated. Among these threats,…
SOCRadar
Grandoreiro Malware Campaign: A Global Threat to Banking Security
The Grandoreiro banking trojan was first observed in 2016. This threat is described as a highly sophisticated and adaptive Windows-based banking trojan. Grandoreiro uses a Malware-as-a-Service (MaaS) model, making it easily accessible…
SOCRadar
Zyxel NAS Devices’ EoL Models Patched for Critical Code Execution Vulnerabilities: CVE-2024-29972, CVE-2024-29973, CVE-2024-29974
[Update] June 24, 2024: “Critical Zyxel NAS Vulnerability (CVE-2024-29973) Exploited by Mirai-like Botnet” Zyxel has issued critical security updates for its NAS (Network-Attached Storage) devices, namely for the NAS326 and NAS542 models,…
SOCRadar
Overview of the Snowflake Breach: Threat Actor Offers Data of Cloud Company’s Customers
This blog actively documents significant updates related to the Snowflake Breach. Latest update: Arkana Security Lists Ticketmaster Data Linked to 2024 Snowflake Breach – June 6, 2025 In recent weeks,…
SOCRadar
New in CISA KEV: Check Point VPN Zero-Day CVE-2024-24919 & Linux Kernel Flaw CVE-2024-1086
[Update] CVE-2024-1086 Now Tied to Ransomware Attacks The U.S. Cybersecurity and Infrastructure Agency (CISA) updated its Known Exploited Vulnerabilities (KEV) Catalog to include two CVEs, calling for organizations to address…
SOCRadar
GuptiMiner Campaign: The Trojan Tango of Infiltrating Antivirus Updates for Deception
The GuptiMiner malware campaign is creating significant disruption in the cybersecurity landscape by exploiting a vulnerability in eScan antivirus software. Attackers are using this flaw to install cryptocurrency mining malware…
SOCRadar
Progress Telerik Report Server Receives Security Update for Critical Auth Bypass Vulnerability, CVE-2024-4358
[Update] June 14, 2024: “CISA Adds CVE-2024-4358 to Known Exploited Vulnerabilities Catalog” [Update] June 4, 2024: “Proof-of-Concept Exploit Available for Critical Telerik Report Server Vulnerability (CVE-2024-4358)” A critical vulnerability has…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action