Latest articles
SOCRadar
Windows SmartScreen Vulnerability Exploited in DarkGate Malware Attacks, Patch CVE-2024-21412 Now
[Update] July 25, 2024: “Information Stealer Campaign Exploits the Windows SmartScreen Vulnerability (CVE-2024-21412)” In January 2024, a new DarkGate malware campaign was discovered, which used a Windows Defender SmartScreen zero-day…
SOCRadar
CISA Highlights Updates Addressing Adobe, Fortinet Vulnerabilities: CVE-2023-42789, CVE-2023-48788, CVE-2024-20756, CVE-2024-20767
[Update] December 17, 2024: “CISA Adds CVE-2024-20767 to Known Exploited Vulnerabilities Catalog” [Update] April 16, 2024: “Novel Campaign ‘Connect:fun’ Exploits CVE-2023-48788” [Update] April 9, 2024: “CVE-2023-48788 Vulnerability in FortiClient EMS…
SOCRadar
An Overview of Microsoft March 2024 Patch Tuesday: Severe RCE and Privilege Escalation Vulnerabilities
Microsoft has released Patch Tuesday for March 2024, which addresses 61 security vulnerabilities. Two of the vulnerabilities are classified as critical in maximum severity in Microsoft advisories; this month’s update…
SOCRadar
Critical CVE-2024-21899 Vulnerability in QNAP Products; Upcoming PoC Exploit for Outlook Vulnerability, CVE-2024-21378
QNAP recently addressed three vulnerabilities affecting their QTS, QuTS hero, QuTScloud, and myQNAPcloud products. One of these vulnerabilities is of critical severity, marking a concerning development in the vulnerability landscape.…
SOCRadar
Critical Veritas NetBackup & JFrog Artifactory Vulnerabilities (CVE-2024-28222, CVE-2023-42662); CISA Alert for Cisco Flaws
New critical vulnerabilities have surfaced in Veritas NetBackup and JFrog Artifactory, solutions that are widely utilized in global operations regarding data backup, and software supply chain. These vulnerabilities require immediate…
SOCRadar
Navigating the Shadowy Depths of the Migo Malware Campaign
The Migo malware campaign emerged as a formidable adversary, targeting Redis servers with novel system-weakening techniques aimed at cryptojacking. This campaign not only highlights the sophistication of modern cyber attacks but also…
SOCRadar
VMware ESXi, Workstation, Fusion Vulnerabilities Allow Code Execution, Sandbox Escape (CVE-2024-22252 – 22255)
[Update] March 7, 2024: “CISA Urges Swift Patching of VMware Vulnerabilities” VMware has released an advisory to address multiple security vulnerabilities present in VMware ESXi, Workstation, and Fusion. These vulnerabilities…
SOCRadar
ALPHV’s Roller Coaster, $22 Million Ransom
[Update] March 7, 2024: “Money Paid, Data Retained; ALPHV’s Exit Scam” The ransomware attack on Change Healthcare has become one of the most disruptive incidents in recent memory, causing widespread chaos in…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action