Latest articles
SOCRadar
Dark Web Profile: Salt Typhoon
[Update] February 15, 2025: “Salt Typhoon Exploited Cisco Router Flaws and Breached Telecoms” Salt Typhoon, a Chinese state-sponsored Advanced Persistent Threat (APT), has been a formidable force in cyber espionage…
SOCRadar
Critical Ivanti CSA Auth Bypass (CVE-2024-11639) Patched Alongside Other High-Impact Flaws
Ivanti recently released critical security updates to address several high-impact vulnerabilities in its products, including the Cloud Services Appliance (Ivanti CSA), Connect Secure (ICS), and Policy Secure (IPS). These updates…
SOCRadar
Cryptojacking Campaign Targets Docker and Kubernetes: Surge in Container-Based Attacks
A recent surge in cryptojacking campaigns has targeted unsecured Docker and Kubernetes environments, exploiting misconfigurations to gain unauthorized access. These attacks leverage open API endpoints in Docker hosts, allowing threat…
SOCRadar
December 2024 Patch Tuesday Update – One Actively Exploited Zero-Day, Multiple Critical RCEs; SAP Updates
[Update] January 2, 2025: “PoC Exploit Available for Critical CVE-2024-49112 “LDAP Nightmare” Vulnerability” Microsoft’s latest updates in the December 2024 Patch Tuesday bring fixes for 72 security vulnerabilities. This month’s…
SOCRadar
What Makes SOCRadar a Game-Changer in Threat Intelligence
Today, when cyber threats are advancing at a rate never seen before, it’s no longer enough to rely on static tools or fragmented solutions. Businesses need advanced, sophisticated platforms that…
SOCRadar
Termite Ransomware Attack on Blue Yonder: What You Need to Know
In late November 2024, Blue Yonder, a critical provider of supply chain management solutions, fell victim to a ransomware attack attributed to the newly emerged Termite ransomware group. The attack…
SOCRadar
OpenWrt’s Attended SysUpgrade (ASU) Vulnerability Exposes Routers to Malicious Firmware Attacks
OpenWrt, a popular open-source Linux-based embedded operating system, recently discovered a critical vulnerability (CVE-2024-54143) in its Attended SysUpgrade (ASU) server. The ASU service, which was designed to speed up firmware…
SOCRadar
Dark Web Profile: Ymir Ransomware
The emergence of Ymir ransomware adds a new layer to the cybersecurity landscape, featuring advanced tactics that challenge traditional security defenses. Originating from stealer malware as its initial access vector,…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action