Latest articles
SOCRadar
Major Cyber Attacks in Review: March 2024
March 2024 witnessed a wave of cyber attacks targeting prominent organizations globally. From telecommunications giants to government pension funds, several high-profile entities encountered significant security incidents, underscoring the persistent threat…
SOCRadar
Cyber Reflections of Iran’s Attack on Israel
[Update] April 22, 2024: “Israeli Hackers Strike Back: Cyber Av3ngers Hacked” [Update] April 17, 2024: “Ongoing Hacktivist Activities” On Saturday and early Sunday, Iran launched a series of missile and drone attacks…
SOCRadar
Critical PHP Vulnerabilities: Update Now to Prevent Takeovers and Command Injection (CVE-2024-1874, CVE-2024-2756, CVE-2024-3096, CVE-2024-2757)
The PHP development team recently announced security updates that addressed several vulnerabilities. The vulnerabilities are mostly critical and involve arbitrary command injection, authentication bypass, and Denial-of-Service (DoS) risks. PHP is a widely-used scripting language,…
SOCRadar
Critical OS Command Injection Vulnerability in Palo Alto’s GlobalProtect Gateway: CVE-2024-3400. The patch is not available yet.
[Update] April 17, 2024: “PoC Exploit Available for CVE-2024-3400: Researchers Analyze Vulnerability Amid Palo Alto’s Hotfix Rollout” [Update] April 16, 2024: “Hotfixes Available: Palo Alto Addresses CVE-2024-3400 Vulnerability” [Update] April…
SOCRadar
Microsoft’s April 2024 Patch Tuesday, 149 Vulnerabilities Patched, Including 2 Zero-Day Vulnerabilities
Microsoft’s April 2024 Patch Tuesday was a substantial release addressing a total of 149 security vulnerabilities across various products, including 2 Zero-Day vulnerabilities. Among these, 67 were classified as remote…
SOCRadar
Ivanti Connect Secure and Policy Secure Gateways Vulnerable to DoS and Code Execution (CVE-2024-21894)
Ivanti recently released patches to fix multiple vulnerabilities found in their popular Connect Secure (ICS) and Policy Secure VPN gateways: CVE-2024-21894, CVE-2024-22053, CVE-2024-22052, and CVE-2024-22023. These vulnerabilities present significant risks, as…
SOCRadar
Google’s Response to Pixel Zero-Days: CVE-2024-29745, CVE-2024-29748; Chrome V8 Zero-Day, CVE-2024-3159
[Update] April 5, 2024: “CISA Urges Immediate Action on Pixel Zero-Day Vulnerabilities” Google addressed two zero-day vulnerabilities affecting Google Pixel devices, which are reportedly under exploitation. Despite the Android April 2024 updates…
SOCRadar
Critical OS Command Injection Flaw in Progress Flowmon: CVE-2024-2389
[Update] April 25, 2024: “PoC Exploit Code is Available for CVE-2024-2389 in Flowman” Progress disclosed a highly critical vulnerability, CVE-2024-2389, that affects the Flowmon product. Exploiting this vulnerability could let attackers…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action