
Trick or Threat: Diving into Spooky Techniques of Ransomware Groups
Trick or Threat: Diving into Spooky Techniques of Ransomware Groups October, a month of chilling winds, pumpkin spice, and haunting tales, also marks Cybersecurity Awareness Month. An annual campaign,...

New Bulletin by CISA on Rising Vulnerabilities: Apache, BIG-IP, IBM, V...
New Bulletin by CISA on Rising Vulnerabilities: Apache, BIG-IP, IBM, VMware, WordPress, and More The Cybersecurity and Infrastructure Security Agency (CISA) released a summary of new vulnerabilities w...

How to Utilize Attack Surface Management and Vulnerability Intelligenc...
How to Utilize Attack Surface Management and Vulnerability Intelligence for ‘Vulnerability Mapping’ The concept of vulnerability is a persistent shadow that haunts the digital realm; it is an element ...

British and Mexican Companies’ Access Sales, Airline Breach, US Citize...
British and Mexican Companies’ Access Sales, Airline Breach, US Citizen Data Leak The relentless pace of dark web threats persists. The SOCRadar Dark Web Team reveals a fresh wave of illicit activitie...

SIM Swappers Collaborate with Ransomware Gangs
SIM Swappers Collaborate with Ransomware Gangs In today’s digital world, the landscape of cyber threats is changing rapidly. One of the latest developments in this arena is the alliance between ...

High-Severity VMware Tools and vCenter Server Vulnerabilities Addresse...
High-Severity VMware Tools and vCenter Server Vulnerabilities Addressed with Recent Patches (CVE-2023-34057, CVE-2023-34058, CVE-2023-34048) [Update] January 23, 2024: ”VMware Confirms Active Exploit...

Critical Vulnerability in F5 BIG-IP Configuration Utility Allows Reque...
Critical Vulnerability in F5 BIG-IP Configuration Utility Allows Request Smuggling, Leads to RCE: CVE-2023-46747 [Update] November 1, 2023: See the subheading: “F5 Reports Active Exploitation of CVE-2...

KillNet Announces Launch of A New DDoS Service
KillNet Announces Launch of A New DDoS Service During the cyberwarfare caused by the Israel-Palestine conflict and Russia’s invasion of Ukraine in cybersecurity, it’s paramount to stay upd...

A malicious code found: New Magecart Campaign That’s Abusing 404 Pages...
A malicious code found: New Magecart Campaign That’s Abusing 404 Pages Magecart is a term used to describe a type of cyberattack that targets online retailers by injecting malicious code into their we...

Dark Peep #3: Gone Phishing, We’ll Be Back!
Dark Peep #3: Gone Phishing, We’ll Be Back! It is clear that the world of the dark web will never be still, but the shape and size of the waves can change, and sometimes, there are still areas in this...

On Threat Actors' Radar: PoC Exploits for VMware Aria Operations Vulne...
On Threat Actors’ Radar: PoC Exploits for VMware Aria Operations Vulnerability (CVE-2023-34051), and More Newly discovered vulnerabilities are a constant source of concern for the cybersecurity ...

Security Breach in Okta Support System Continues Sparking Concerns: Cl...
Security Breach in Okta Support System Continues Sparking Concerns: Cloudflare and 1Password Share Disclosures [Update] November 29, 2023: A recent audit uncovered a broader data theft scope in the Oc...

Dark Web Sales: Estée Lauder, Vivo Databases, and 2 Billion Lines of S...
Dark Web Sales: Estée Lauder, Vivo Databases, and 2 Billion Lines of Stealer Logs In the ever-evolving world of cyber threats, the SOCRadar Dark Web Team has unveiled a disconcerting series of illicit...

Cyber Awakeness Month: Takedown of Trigona, Hive Ransomware Resurges, ...
Cyber Awakeness Month: Takedown of Trigona, Hive Ransomware Resurges, RansomedForum and New RaaS ‘qBit’ From the takedown of Trigona to the resurgence of Hive Ransomware, and the emergence of a new ha...

SolarWinds Releases Crucial Fixes for ARM Security Vulnerabilities (CV...
SolarWinds Releases Crucial Fixes for ARM Security Vulnerabilities (CVE-2023-35182, CVE-2023-35185, and CVE-2023-35187) In the ever-evolving landscape of cybersecurity, staying ahead of threats is par...

Taking the Power of ChatGPT Behind You for Enhanced Cybersecurity: A G...
Taking the Power of ChatGPT Behind You for Enhanced Cybersecurity: A Guide for CISOs In today’s rapidly evolving digital landscape, Chief Information Security Officers (CISOs) face an uphill bat...

New Cybersecurity Rules of SEC: What Businesses Need to Know
New Cybersecurity Rules of SEC: What Businesses Need to Know The U.S. Securities and Exchange Commission (SEC), a regulatory body responsible for overseeing securities markets and protecting investors...

Zero-Day Vulnerabilities in Citrix NetScaler and WinRAR Are Under Acti...
Zero-Day Vulnerabilities in Citrix NetScaler and WinRAR Are Under Active Exploitation (CVE-2023-4966, CVE-2023-38831) Serious vulnerabilities in Citrix NetScaler and WinRAR are currently being exploit...

GhostLocker: A New Generation of Ransomware as a Service (RaaS)
GhostLocker: A New Generation of Ransomware as a Service (RaaS) In recent times, we have witnessed a sharp uptick in ransomware attacks, a disconcerting trend that has alarmed both cybersecurity exper...

Threat Actor Profile: SiegedSec
Threat Actor Profile: SiegedSec [Update] July 11, 2024: “SiegedSec Disbands” In the ever-changing digital landscape, new cyber adversaries continuously emerge. One of the latest entrants in this arena...