Latest articles
SOCRadar
CISA Warns for Vulnerabilities in Industrial Control Systems (ICS)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns about multiple security vulnerabilities in GE Digital, Siemens, Contec, and Mitsubishi Electric products. The agency issued four ICS (Industry Control Systems)…
SOCRadar
Hydra Aftermath and the Future of Dark Web Marketplaces
By SOCRadar Research Russian-speaking Hydra Market was the biggest among darknet markets , with a $1B turnover in 2020. It was also the largest narcotic market among the countries of…
SOCRadar
SOCRadar Launches New CTI Solution for SOC Analysts
Introducing CTI4SOC, SOCRadar’s stand-alone threat intelligence to meet the needs of SOC analysts . With its comprehensive features to close the skill gap of organizations, CTI4SOC will function as an extension…
SOCRadar
Threat Actors Use GitHub Codespaces Feature to Distribute Malicious Content
Since its public release in November 2022, GitHub Codespaces has been a popular environment among developers; however, researchers believe threat actors could also use it to launch attacks . According…
SOCRadar
The Week in Dark Web – 18 January 2023 – Partnership Posts, Data Leaks, and Requests
Powered by DarkMirror™ Threat actors seek to acquire new capabilities by forming partnerships with their peers to ensure continuity in cybercrime operations. By adding a new member to the team,…
SOCRadar
What Do You Need to Know About the Critical RCE Vulnerability in Zoho’s ManageEngine? (CVE-2022-47966)
CVE-2022-47966, a critical vulnerability in a number of Zoho’s products, allows remote code execution without authentication. The use of a vulnerable third-party dependency called Apache Santuario is the root cause that…
SOCRadar
Attackers Infected a CircleCI Employee with Malware to Steal Customer Session Tokens
Software provider CircleCI confirmed that a data breach in December resulted in the theft of some of its customers’ sensitive information. The breach occurred after an employee’s computer was infected…
SOCRadar
4 Lessons Learned from Log4Shell
By SOCRadar Research Log4Shell vulnerability shook the cyber world to its core when it first became public in December 2021. It is a zero-day vulnerability discovered on the log4j logging…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action