Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Critical Zero-Day Vulnerability in ‘libwebp’: CVE-2023-4863 Reassigned as CVE-2023-5129 SOCRadar

Critical Zero-Day Vulnerability in ‘libwebp’: CVE-2023-4863 Reassigned as CVE-2023-5129

[Update] October 18, 2023: See the subheading: “Fantom Foundation Breached: $550K Crypto Theft Linked to CVE-2023-4863.” Google has issued a new CVE identifier for a critical zero-day vulnerability that is…

Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploit (CVE-2023-29357) SOCRadar

Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploit (CVE-2023-29357)

[Update] January 11, 2024: “SharePoint Vulnerability Has Been Added to the KEV Catalog by CISA” [Update] September 29, 2023: See the subheading: “Proof-of-Concept Exploit Is Available for SharePoint Server Vulnerability…

SOCRadar

NIST Cybersecurity Framework 2.0: What You Need to Know

In a previous SOCRadar blog post, we delved into the importance of cybersecurity frameworks for today’s organizations. In this installment, we pivot our focus toward the much-anticipated NIST Cybersecurity Framework…

SOCRadar

What You Need to Know About the Alleged Sony Breach

The RansomedVC group has announced that it successfully breached Sony, the renowned Japanese multinational electronics giant. The group claims to have infiltrated all of Sony’s systems in their victim listing,…

SOCRadar

New Botnet Sale and Recruitment Post, US and Canada RDP Access Sale, Dymocks Database

In this week’s dark web update, the SOCRadar Dark Web Team has revealed a series of troubling developments; among their recent findings, databases from a Brazilian travel company and Dymocks…

TeamCity Authentication Bypass Flaw: CVE-2023-42793 SOCRadar

TeamCity Authentication Bypass Flaw: CVE-2023-42793

[Update] December 14, 2023: See the subheading: “CISA Alerts on APT29 Exploiting TeamCity Vulnerability, CVE-2023-42793.”  [Update] October 6, 2023: A PoC exploit for the TeamCity vulnerability has surfaced. Further details…

SOCRadar

Over 400K Buckets and 10.4B Files Are Public Due to Cloud Misconfigurations

In today’s cloud-centric era, the migration of digital assets to cloud storage has become widespread, driven by the demand for high availability and performance. However, this transition has not been…

Critical DICOM Server Misconfigurations Lead to Exposure of 1.6M Medical Records SOCRadar

Critical DICOM Server Misconfigurations Lead to Exposure of 1.6M Medical Records

In a regular threat and vulnerability hunting activity, SOCRadar has discovered during their research that thousands of DICOM servers were exposed on the internet due to misconfigurations, resulting in the…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action