Latest articles
SOCRadar
Exmatter Tool Provides a New Strategy for Extortion
Data exfiltration malware Exmatter, previously associated with the BlackMatter ransomware gang, now has data corruption capabilities. This could signify a new strategy ransomware affiliates may use in the future. Although…
SOCRadar
Threat Actors Utilize PowerPoint Files to Distribute Graphite Malware
Threat actors started utilizing PowerPoint presentations as a code execution method and delivering Graphite malware in targeted attacks. APT28 (Fancy Bear) , a threat actor group linked to Russia, has…
SOCRadar
FARGO Ransomware Targets Vulnerable Microsoft SQL Servers
Microsoft SQL database servers are the target of a new ransomware attack campaign called FARGO ransomware. FARGO, also known as TargetCompany, aims to double-extort victims. This year’s ransomware attacks against MS-SQL…
SOCRadar
Sophos Firewall Patch Released for Actively Exploited Zero-Day RCE Vulnerability
Sophos released a patch for a flaw discovered in their firewall product . Tracked as CVE-2022-3236 (CVSS score: 9.8), the vulnerability allows code injection in the User Portal and Webadmin…
SOCRadar
The Week in Dark Web – 26 September 2022 – Access Sales and Data Leaks
Powered by DarkMirror™ Threat actors threaten organizations by selling databases containing sensitive data and accesses that could pave the way for potential attacks. Here is the summary of this past…
SOCRadar
Ten Things Will Change Cybersecurity in 2023
Businesses come across more significant cybersecurity challenges as technology evolves. The digital environment and the attack surface are changing every single day. Thus, the significance of knowing when to change…
SOCRadar
A New Attack Wave Targeting Critical Magento Vulnerability
E-commerce platform Magento has become a frequent target for hackers. More attempts have been made to exploit CVE-2022-24086 since its proof-of-concept was made available. The critical vulnerability is present in…
SOCRadar
CISA Urges to Patch ManageEngine Against RCE Vulnerability
CISA has added a new critical vulnerability to its Known Exploited Vulnerabilities Catalog . The flaw exists in several ManageEngine products from Zoho and can lead to remote code execution…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action