Latest articles
SOCRadar
New Microsoft Exchange Zero-Day Vulnerabilities Could Lead to RCE, SSRF (ZDI-23-1578, ZDI-23-1579, ZDI-23-1580, ZDI-23-1581)
The discovery of four new zero-day vulnerabilities in Microsoft Exchange is raising concerns in the cybersecurity community. The vulnerabilities are high-severity, and pertain to Server-Side Request Forgery (SSRF) and Remote…
SOCRadar
New Gootloader Variant “GootBot” Changes the Game in Malware Tactics
Researchers recently identified a fresh Gootloader malware variant known as “GootBot,” used in SEO poisoning attacks. This variant introduces features that enable threat actors to move laterally within infected systems,…
SOCRadar
Critical RCE Vulnerability in Apache ActiveMQ Is Targeted by HelloKitty Ransomware (CVE-2023-46604)
[Update] November 4, 2025: Kinsing Uses Apache ActiveMQ Flaw (CVE-2023-46604) to Deliver Sharpire Backdoor [Update] December 19, 2023: “Ongoing Exploitation of Apache ActiveMQ Vulnerability: Threat Actors Leverage Ladon, NetCat, AnyDesk,…
SOCRadar
Atlassian CISO Announced: Improper Authorization Vulnerability Detected on Confluence Data Center and Server (CVE-2023-22518)
[Update] April 18, 2023: “Cerber Ransomware Exploits CVE-2023-22518 in Confluence Servers, Deploys Linux Variant” [Update] November 8, 2023: CISA has included the CVE-2023-22158 vulnerability in Confluence Data Center and Server…
SOCRadar
Dark Opinion: Doing Things Under the Rose, Proxy Data Recovery Companies for Ransomware Negotiation
During the pandemic, a lot of untrue stories spread around. This happened a lot after people started questioning the COVID-19 vaccine. One common belief was that “the vaccine producers are…
SOCRadar
New Bulletin by CISA on Rising Vulnerabilities: Apache, BIG-IP, IBM, VMware, WordPress, and More
The Cybersecurity and Infrastructure Security Agency (CISA) released a summary of new vulnerabilities with a bulletin on October 30, 2023. These vulnerabilities were added to the National Institute of Standards…
SOCRadar
SIM Swappers Collaborate with Ransomware Gangs
In today’s digital world, the landscape of cyber threats is changing rapidly. One of the latest developments in this arena is the alliance between SIM swappers — individuals known for…
SOCRadar
High-Severity VMware Tools and vCenter Server Vulnerabilities Addressed with Recent Patches (CVE-2023-34057, CVE-2023-34058, CVE-2023-34048)
[Update] January 23, 2024: ”VMware Confirms Active Exploitation of CVE-2023-34048, CISA Adds It to the KEV Catalog” [Update] October 31, 2023: CISA has issued an alert regarding the VMware Tools…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action