Latest articles
SOCRadar
Excel’s Blind Spot: The Strategic Deployment of Agent Tesla Malware by Cyberattackers
In the ever-evolving landscape of cyber threats, a notable trend has emerged: the exploitation of a longstanding Microsoft Office vulnerability to disseminate a particularly insidious strain of malware, Agent Tesla.…
SOCRadar
Latest Zero-Day Vulnerabilities: UNC4841 Targets Barracuda ESG with CVE-2023-7102, Apache OFBiz Authentication Bypass (CVE-2023-51467)
The UNC4841 group, linked to China, is targeting Barracuda Email Security Gateway (ESG) appliances again, exploiting a new zero-day vulnerability identified as CVE-2023-7102. Investigations revealed that attackers, using specially crafted…
SOCRadar
Weekly Vulnerability Summary by CISA: Ivanti Avalanche, Apache Dubbo, OpenSSH, and More
The Cybersecurity and Infrastructure Security Agency (CISA) has released a new vulnerability summary for the latest security vulnerabilities. The summary for the week of December 18 includes numerous critical vulnerabilities…
SOCRadar
Challenge of Protecting PII, Hunters Become the Hunt: OpenAI Vulnerability, Blackmailing of Bounty Hunters
A paradox emerges: those who protect us from cyber threats are themselves becoming the hunted. The reason is that our personal data might be exposed in places we don’t expect.…
SOCRadar
CISA Updates: Microsoft 365 Guidance, SCuBAGear Tool, Mozilla Alert, QNAP & FXC Vulnerabilities Enter KEV
CISA has officially released the Microsoft 365 Secure Configuration Baselines, aiming to assist organizations in enhancing the security and resilience of their Microsoft 365 cloud services. This release also includes…
SOCRadar
Massive Data Leak by BidenCash: 1.9M Credit Card Details Exposed on Hacker Forum
The SOCRadar Dark Web Team detected a significant data breach on a hacker forum, revealing the leak of 1.9 million credit card details by BidenCash, a carding market initiated in…
SOCRadar
Over a Dozen Critical RCE Vulnerabilities in Ivanti Avalanche; Actively Exploited Chrome Zero-Day, CVE-2023-7024
Ivanti has issued security updates to address a total of 22 vulnerabilities identified in its Avalanche Mobile Device Management (MDM) product. Among these, 13 are of critical severity, demanding immediate attention.…
SOCRadar
ALPHV Seized, Unseized, Decrypted; Pandora’s Box May Be Reopened
Emerging as a significant player in the ransomware landscape, ALPHV (BlackCat) has established itself through sophisticated ransomware attacks. Utilizing advanced techniques and targeting a wide range of industries, including critical…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action