Latest articles
SOCRadar
Critical Fortinet Vulnerability (CVE-2024-48887) Puts FortiSwitch Admin Credentials at Risk
A newly disclosed critical vulnerability in Fortinet’s FortiSwitch product line is raising urgent security concerns. Tracked as CVE-2024-48887, this flaw enables remote, unauthenticated attackers to change administrator passwords without any…
SOCRadar
April 2025 Patch Tuesday: Microsoft Addresses 126 Vulnerabilities Including Actively Exploited CLFS Zero-Day
[Update] May 8, 2025: Play Ransomware Exploitation Linked to CVE-2025-29824 Microsoft’s April 2025 Patch Tuesday brings an extensive set of updates aimed at shoring up system defenses across its product…
SOCRadar
Top 5 Threats to Mobile Banking Security and How to Avoid Them
Mobile banking has become essential for convenient financial management in the digital age. However, this convenience also brings the risk of cyberattacks. As mobile banking grows, it is crucial to…
SOCRadar
April 2025 Android Update: Actively Exploited Kernel Bugs and Remote Privilege Escalation Threat
Google has just released its April 2025 Android security bulletin, addressing a broad spectrum of vulnerabilities across its mobile operating system. Among the 62 issues patched, two kernel-level vulnerabilities –…
SOCRadar
Storm-2372: Russian APT Using Device Code Phishing in Advanced Attacks
A newly uncovered cyber campaign led by the Russian state-backed group Storm-2372 is exploiting device code phishing to bypass Multi-Factor Authentication (MFA) and infiltrate high-value targets. This highly targeted tactic…
SOCRadar
Dark Web Sees New Market Launch, Credit Card and VPN Access Sales
SOCRadar’s Dark Web Team has identified several new threats emerging on hacker forums in the last week. Highlights include the promotion of a newly launched illicit database market covering a broad range…
SOCRadar
UNC5221 Targets Critical Ivanti Flaw (CVE-2025-22457) with TRAILBLAZE & BRUSHFIRE Malware
A recently disclosed critical vulnerability in Ivanti products, CVE-2025-22457, has drawn urgent attention across the cybersecurity community. The flaw, confirmed to be actively exploited in the wild, impacts widely used…
SOCRadar
Everything You Need to Know About the Alleged Twilio SendGrid Breach
[Update] April 9, 2025: “Alleged Breach Expands Beyond SendGrid” On April 3, 2025, a threat actor operating under the alias Satanic announced on BreachForums that they were in possession of…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action