Latest articles
SOCRadar
3AM Ransomware: A Modern Threat with a Vintage Twist
The 3AM ransomware group has recently been spotlighted for its cybercriminal activities. However, why it is the topic of the day is their choice of technology. A recent tweet by…
SOCRadar
‘Nightmangle’ Telegram C2 Agent and New FUD Crypter with Windows Defender Bypass
[Update] October 5, 2023: See the subheading: “SPCRYPTER’s Latest Update: No More Trials.” Hackers favor Telegram as a platform for a wide range of activities, such as communication, announcements, advertisements,…
SOCRadar
WS_FTP Server Critical Vulnerabilities: What You Need to Know (CVE-2023-40044, CVE-2023-42657)
In the ever-changing landscape of cybersecurity, staying updated with current vulnerabilities is crucial. The recent issues discovered in WS_FTP Server underscore this fact. In this article, we explore the details…
SOCRadar
New Campaign Distributes Malicious npm and PyPI Packages to Pilfer Kubernetes Config, SSH Keys
Researchers have discovered a concerning surge in deceptive npm and PyPI packages distributed as part of a malicious campaign, aimed at extracting Kubernetes configurations and SSH keys from compromised systems.…
SOCRadar
Critical Zero-Day Vulnerability in ‘libwebp’: CVE-2023-4863 Reassigned as CVE-2023-5129
[Update] October 18, 2023: See the subheading: “Fantom Foundation Breached: $550K Crypto Theft Linked to CVE-2023-4863.” Google has issued a new CVE identifier for a critical zero-day vulnerability that is…
SOCRadar
Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploit (CVE-2023-29357)
[Update] January 11, 2024: “SharePoint Vulnerability Has Been Added to the KEV Catalog by CISA” [Update] September 29, 2023: See the subheading: “Proof-of-Concept Exploit Is Available for SharePoint Server Vulnerability…
What You Need to Know About the Alleged Sony Breach
The RansomedVC group has announced that it successfully breached Sony, the renowned Japanese multinational electronics giant. The group claims to have infiltrated all of Sony’s systems in their victim listing,…
SOCRadar
TeamCity Authentication Bypass Flaw: CVE-2023-42793
[Update] December 14, 2023: See the subheading: “CISA Alerts on APT29 Exploiting TeamCity Vulnerability, CVE-2023-42793.” [Update] October 6, 2023: A PoC exploit for the TeamCity vulnerability has surfaced. Further details…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action