Latest articles
SOCRadar
OpenVPN Access Server Vulnerabilities: Risk of Information Exposure, DoS, and RCE (CVE-2023-46849, CVE-2023-46850)
Last week, OpenVPN Access Server, a widely-used open-source VPN solution, received an update addressing two vulnerabilities, tracked as CVE-2023-46849 and CVE-2023-46850. Although CVSS scores for these vulnerabilities are pending, they…
SOCRadar
Lessons Learned From Israel-Hamas Conflict: A Cybersecurity Perspective
The Israel-Hamas conflict, which started with the surprise attack of Hamas militants on Israeli territory on October 7, escalated in a very short time with Israel’s declaration of war and…
SOCRadar
Major Cyberattacks in Review: October 2023
In October 2023, a surge of cyber incidents underscored the persistent and evolving threats confronting organizations. October 2023 witnessed a range of malicious activities, from large-scale data breaches to cyber…
SOCRadar
Sumo Logic Security Breach: Unauthorized Access to AWS with Stolen Credentials
Sumo Logic, a cybersecurity company renowned for its expertise in cloud-based log management, analytics, and insights, recently disclosed a security breach. The breach came to light when the company detected…
SOCRadar
Path Traversal Leading to Compromise: SysAid On-Prem Software CVE-2023-47246 Vulnerability
[Update] November 15, 2023: See the subheadings: “Nuclei Template Now Available, Scan for the SysAid Vulnerability (CVE-2023-47246).” [Update] November 14, 2023: See the subheadings: “CVE-2023-47246 in SysAid Has Been Listed…
SOCRadar
Surge in Attention Towards Critical Vulnerabilities in QNAP QTS and NAS Services (CVE-2023-23368, CVE-2023-23369)
QNAP recently published advisories for two critical command injection vulnerabilities, tracked as CVE-2023-23368 and CVE-2023-23369. These vulnerabilities affect the QTS operating system, QuTS hero, QuTScloud, and several other applications on…
SOCRadar
The Landscape of Hacktivism in the Context of Current Events
Hacktivism, may be defined in the dictionary as a mixture of the words “hacking” and “activism,” encompasses the strategic application of hacking techniques in pursuit of political or societal objectives.…
SOCRadar
New Microsoft Exchange Zero-Day Vulnerabilities Could Lead to RCE, SSRF (ZDI-23-1578, ZDI-23-1579, ZDI-23-1580, ZDI-23-1581)
The discovery of four new zero-day vulnerabilities in Microsoft Exchange is raising concerns in the cybersecurity community. The vulnerabilities are high-severity, and pertain to Server-Side Request Forgery (SSRF) and Remote…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action