Latest articles
SOCRadar
PoC Exploit for CVE-2024-4956 in Sonatype Nexus Repository 3 Draws Threat Actors’ Attention
Sonatype recently released a security advisory alerting users to a high-severity security vulnerability, identified as CVE-2024-4956, in Nexus Repository. Alarmingly, threat actors have started circulating its exploits, indicating increasing interest.…
SOCRadar
New Cyber Attack Campaign Bombarding Organizations with Fake Emails and Phone Calls
The cyber threat landscape is always changing, with attackers using new methods to get into organizations and exploit their weaknesses. One campaign that has been in the news lately is…
SOCRadar
CVE-2020-17519 in Apache Flink Enters CISA’s KEV Catalog & GitLab Patches XSS Flaw, CVE-2024-4835
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities (KEV) Catalog to include another CVE, warning against exploitation. The CVE highlighted by the agency…
SOCRadar
DNSBomb: A New DoS Threat Targeting Critical Internet Infrastructure
Illustrative Image – Generated by DALL-E Introduction As the digital landscape continues to change, so does the doom on the infrastructure. This revolution of the digital landscape has been epitomized…
SOCRadar
Atlassian and Ivanti Address Critical Vulnerabilities in May Updates: CVE-2024-21683, CVE-2023-4759, CVE-2024-29822, and More
[Update] October 3, 2024: “CISA Added Ivanti EPM Vulnerability (CVE-2024-29824) to KEV Catalog” [Update] May 24, 2024: “PoC Exploit for Confluence RCE Vulnerability (CVE-2024-21683) Circulates Hacker Channels” In their latest…
SOCRadar
Critical Patch for Veeam Backup Enterprise Manager (VBEM): CVE-2024-29849 Could Allow Account Takeover
[Update] June 10, 2024: “PoC Exploit Released for the Critical CVE-2024-29849 Vulnerability in Veeam” Veeam issued patches for a set of vulnerabilities in its Veeam Backup Enterprise Manager (VBEM), a…
SOCRadar
Critical Auth Bypass in GitHub Enterprise Server, CVE-2024-4985; PoC Available for QNAP QTS’ CVE-2024-27130
The vulnerability landscape continues to grow, introducing critical risks that can enable malicious actions if not promptly addressed. Recently, significant vulnerabilities have come to light, targeting widely used technologies: GitHub…
SOCRadar
CVE-2024-4367 in PDF.js Allows JavaScript Execution, Potentially Affecting Millions of Websites: Update Now
Security experts identified a significant vulnerability in PDF.js, a widely used JavaScript library for displaying PDF documents in web browsers, which is actively maintained by Mozilla. Aside from being an…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action