Latest articles
SOCRadar
Malicious Python Packages Steal AWS Keys
Cybersecurity researchers have discovered that some Python packages available in the PyPI repositories engage in malicious activity. Malicious packets send some sensitive data, including AWS login credentials, to internet-facing endpoints.…
SOCRadar
Threat Actors Target VMware Servers by Exploiting Log4Shell Vulnerability
The Log4Shell RCE vulnerability with code CVE-2021-44228 continues to be exploited by state-backed threat actors. Attackers utilize the vulnerability to target VMware Horizon and Unified Access Gateway servers. By exploiting the…
SOCRadar
How to Protect Yourself Against Shodan, BinaryEdge and ZoomEye?
Have you ever wondered how hackers find the IPs, ports, and services required for their attacks? Some attacks need thousands of host computers to find the vulnerable ones. Hackers do…
SOCRadar
Dark Web Profile: Netwalker Ransomware
Today, with the effects of digitalization , most of the information is stored online. This situation creates a vulnerability for organizations because the number of cyberattacks is increasing daily to…
SOCRadar
NTLM Relay Attack Leads to Windows Domain Takeover
A new DFSCoerce NTLM Relay attack has been discovered on Windows. Threat actors can take over Microsoft Active Directory Certificate Services (AD CS) domains using MS-DFSNM (Microsoft Distributed File System…
SOCRadar
SOCRadar Exhibiting Extended Threat Intelligence Solution at InfoSecurity Europe 2022
SOCRadar will be at InfoSecurity Europe, held at London ExCel this week from 21 to 23 June. We are very excited to meet you face to face at our booth…
SOCRadar
BRATA Malware Becomes an Advanced Threat
Originally a banking trojan , BRATA acquires new capabilities and becomes a more advanced threat. Malware can now be much more effective at stealing user information . Cleafy’s analysis shows…
SOCRadar
DriftingCloud APT Group Exploits Zero-Day In Sophos Firewall
Cybersecurity researchers have revealed that Sophos Firewall has been actively exploited by DriftingCloud APT group since early March. Apparently, the attacks started long before the CVE-2022-1040 vulnerability was patched, affecting…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action