Latest articles
SOCRadar
New High-Severity Vulnerability in Apache ActiveMQ Poses Risk of Unauthorized Access: CVE-2024-32114
A high-severity vulnerability, CVE-2024-32114, has been discovered in Apache ActiveMQ, potentially granting unauthorized access to the API layers without authentication. Apache ActiveMQ, a widely adopted open-source Java-based message broker, serves as…
SOCRadar
Latin America Under Threat: The Venom RAT Campaign’s Cyber Invasion Initiative
In Latin America, there is a significant cyber threat posed by the Venom RAT campaign, necessitating swift and decisive action. AI illustration of Venom RAT The VenomRAT campaign, masterminded by…
SOCRadar
ShadowRay Campaign Exploits Critical Ray Framework Vulnerabilities to Compromise AI Workloads Globally
Since September 5, 2023, a sophisticated cyber threat named the ‘ShadowRay’ campaign has targeted vulnerabilities in the Ray framework. This campaign highlights a critical breach in the Ray framework, developed…
SOCRadar
APT28 Deploys ‘GooseEgg’ in Attacks Exploiting the Windows Print Spooler Vulnerability, CVE-2022-38028
Microsoft recently shed light on a campaign orchestrated by the Russian-based threat actor Forest Blizzard, employing a custom tool named ‘GooseEgg’ to escalate privileges and pilfer credentials from networks. Of significant concern,…
SOCRadar
OpenMetadata Vulnerabilities Allow Attackers to Cryptomine in Kubernetes Environments
Recent findings from a Microsoft security blog reveal that attackers exploit newly discovered critical vulnerabilities in the OpenMetadata platform to target Kubernetes workloads. Subsequently, they use these workloads for cryptomining operations. What…
SOCRadar
CVE-2024-21006 in Oracle WebLogic Server – Oracle’s April 2024 Update Brings 441 New Security Patches
Oracle has released its Critical Patch Update advisory for April 2024, which addresses vulnerabilities across multiple products. This update includes 441 new security patches, including fixes for many critical vulnerabilities; one…
SOCRadar
Committing a Sin, OpenJS Foundation and XZ Utils Incidents: Lessons in Open Source Security
Recent events have brought to light critical issues related to cybersecurity threats and social engineering tactics. The attempted backdoor incident involving XZ Utils and, a short time later, a credible…
SOCRadar
Ivanti Avalanche Received an Update for Over Two Dozen Vulnerabilities (CVE-2024-24996, CVE-2024-29204…)
Ivanti has recently issued security updates to address multiple vulnerabilities in Avalanche. These vulnerabilities, ranging from medium to critical severity, pose risks such as information disclosure, command execution, and Denial-of-Service…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action