Latest articles
SOCRadar
Dark Web Profile: Kimsuky
[Update] December 2, 2024: “Kimsuky’s Phishing Evolution and the Threat of Malwareless Attacks” In cyberspace, the Korean Peninsula has been a hotbed of activity for a while. With conflict unfolding…
SOCRadar
RCE Vulnerability in OpenSSH’s SSH-Agent Forwarding: CVE-2023-38408
SSH-Agent is a widely used program that holds private keys for public key authentication, providing a secure and convenient way to log in to remote machines using SSH. It is…
SOCRadar
Critical Zero-Day in Ivanti EPMM (Formerly MobileIron Core) Is Actively Exploited (CVE-2023-35078)
Ivanti, a U.S. IT software company, has resolved an actively exploited zero-day authentication bypass vulnerability identified as CVE-2023-35078. The vulnerability resides in Ivanti’s mobile device management software, previously known as…
SOCRadar
Critical Vulnerabilities in Atlassian and Apple Products: Apple Zero-Day Actively Exploited (CVE-2023-38606)
Atlassian and Apple have each promptly addressed critical vulnerabilities threatening their products, including an actively exploited zero-day bug. Atlassian’s updates tackled vulnerabilities in Atlassian Confluence Server, Data Center, and Bamboo…
SOCRadar
Zero-Days (CVE-2023-26077, CVE-2023-26078) in Atera Windows Installers
Recent revelations have exposed critical zero-day vulnerabilities in Atera Windows installers. Cyber attackers could potentially use these loopholes to launch privilege escalation attacks. To understand the severity of these vulnerabilities,…
SOCRadar
300% Increase in the Number of Dark Web References to Manufacturing Organizations
SOCRadar’s Manufacturing Threat Landscape Report is out now! This report provides valuable insights into the cybersecurity threats the manufacturing industry faces and offers recommendations to strengthen your organization’s security. Do…
SOCRadar
A Snapshot of 2023 CWE Top 25 Most Dangerous Software Weaknesses
Figure 1: Top 25 CWE logo (MITRE) The 2023 CWE Top 25 Most Dangerous Software Weaknesses is a list that ranks the most widespread and critical weaknesses that can lead…
SOCRadar
Roblox Data Breach, Unauthorized Access Sales, and Global Leaks
Welcome to SOCRadar’s weekly dark web news digest. This week, we spotlight several critical cybersecurity incidents: a significant user data leak from Roblox, unauthorized access sale related to global BPO,…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action