Your Data is Secure and Private with SOC 2 Type 2 Compliant SOCRadar
Your Data is Secure and Private with SOC 2 Type 2 Compliant SOCRadar We are pleased to share an important update regarding the security and privacy of your data with SOCRadar. Upholding the highest da...
Ivanti Released a Patch in Endpoint Manager Solution (EPM) for a Criti...
Ivanti Released a Patch in Endpoint Manager Solution (EPM) for a Critical Vulnerability, CVE-2023-39336 Ivanti has addressed a critical vulnerability in its Endpoint Manager (EPM) solution, identified...
CISA Issues ICS Advisories for Vulnerabilities Affecting Rockwell Auto...
CISA Issues ICS Advisories for Vulnerabilities Affecting Rockwell Automation, Mitsubishi Electric, and Unitronics CISA has issued three advisories on Industrial Control Systems (ICS), addressing the l...
CISA Issues Alert for Juniper Secure Analytics Vulnerabilities (CVE-20...
CISA Issues Alert for Juniper Secure Analytics Vulnerabilities (CVE-2023-46604, CVE-2023-40787, CVE-2023-44487, and More) In a recent alert, the Cybersecurity and Infrastructure Security Agency (C...
Misconfigurations in Google Kubernetes Engine (GKE) Lead to a Privileg...
Misconfigurations in Google Kubernetes Engine (GKE) Lead to a Privilege Escalation Exploit Chain A recent Unit 42 investigation revealed a dual privilege escalation chain impacting Google Kubernetes E...
Operation Triangulation: ‘’Most Sophisticated Attack Chain Ever Seen"...
Operation Triangulation: ‘’Most Sophisticated Attack Chain Ever Seen” The cyber security landscape has recently been abuzz with discussions about Operation Triangulation, a sophisticated and mul...
Excel's Blind Spot: The Strategic Deployment of Agent Tesla Malware by...
Excel’s Blind Spot: The Strategic Deployment of Agent Tesla Malware by Cyberattackers In the ever-evolving landscape of cyber threats, a notable trend has emerged: the exploitation of a longstan...
Latest Zero-Day Vulnerabilities: UNC4841 Targets Barracuda ESG with CV...
Latest Zero-Day Vulnerabilities: UNC4841 Targets Barracuda ESG with CVE-2023-7102, Apache OFBiz Authentication Bypass (CVE-2023-51467) The UNC4841 group, linked to China, is targeting Barracuda Email ...
Weekly Vulnerability Summary by CISA: Ivanti Avalanche, Apache Dubbo, ...
Weekly Vulnerability Summary by CISA: Ivanti Avalanche, Apache Dubbo, OpenSSH, and More The Cybersecurity and Infrastructure Security Agency (CISA) has released a new vulnerability summary for the lat...
Challenge of Protecting PII, Hunters Become the Hunt: OpenAI Vulnerabi...
Challenge of Protecting PII, Hunters Become the Hunt: OpenAI Vulnerability, Blackmailing of Bounty Hunters A paradox emerges: those who protect us from cyber threats are themselves becoming the hunted...
CISA Updates: Microsoft 365 Guidance, SCuBAGear Tool, Mozilla Alert, Q...
CISA Updates: Microsoft 365 Guidance, SCuBAGear Tool, Mozilla Alert, QNAP & FXC Vulnerabilities Enter KEV CISA has officially released the Microsoft 365 Secure Configuration Baselines, aiming to a...
Massive Data Leak by BidenCash: 1.9M Credit Card Details Exposed on Ha...
Massive Data Leak by BidenCash: 1.9M Credit Card Details Exposed on Hacker Forum The SOCRadar Dark Web Team detected a significant data breach on a hacker forum, revealing the leak of 1.9 million cred...
Over a Dozen Critical RCE Vulnerabilities in Ivanti Avalanche; Activel...
Over a Dozen Critical RCE Vulnerabilities in Ivanti Avalanche; Actively Exploited Chrome Zero-Day, CVE-2023-7024 Ivanti has issued security updates to address a total of 22 vulnerabilities identified...
ALPHV Seized, Unseized, Decrypted; Pandora's Box May Be Reopened
ALPHV Seized, Unseized, Decrypted; Pandora’s Box May Be Reopened Emerging as a significant player in the ransomware landscape, ALPHV (BlackCat) has established itself through sophisticated ranso...
Microsoft Alerts of RCE and DoS Vulnerabilities in Perforce Server: CV...
Microsoft Alerts of RCE and DoS Vulnerabilities in Perforce Server: CVE-2023-45849, CVE-2023-35767, CVE-2023-45319, CVE-2023-5759 During a security review of its game development studios, Microsoft fo...
FortiGuard Releases Security Updates for Critical Vulnerabilities in M...
FortiGuard Releases Security Updates for Critical Vulnerabilities in Multiple Products Introduction to the Vulnerabilities On December 12, 2023, FortiGuard announced the release of security updates to...
CISA Urges Organizations to Patch the Critical Apache Struts RCE Vulne...
CISA Urges Organizations to Patch the Critical Apache Struts RCE Vulnerability, CVE-2023-50164 In a recent alert, the Cybersecurity and Infrastructure Security Agency (CISA) highlighted that the Apach...
Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 ...
Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 Critical, and a Non-Microsoft Zero-Day Microsoft has released its December 2023 Patch Tuesday, addressing a total of 36 ...
Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 ...
Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 Critical, and a Non-Microsoft Zero-Day Microsoft has released its December 2023 Patch Tuesday, addressing a total of 36 security v...
Weekly Vulnerability Summary by CISA: Android, Microsoft, CMS Software...
Weekly Vulnerability Summary by CISA: Android, Microsoft, CMS Software, WordPress, Perl, and More The Cybersecurity and Infrastructure Security Agency (CISA) has released a summary of the most recent ...