SOCRadar® Cyber Intelligence Inc. | Looney Tunables: PoC Available for LPE Vulnerability Impacting Major Linux Distributions (CVE-2023-4911)
Oct 05, 2023
Looney Tunables: PoC Available for LPE Vulnerability Impacting Major L...

Looney Tunables: PoC Available for LPE Vulnerability Impacting Major Linux Distributions (CVE-2023-4911) [Update] November 22, 2023: See the subheading: “CISA Adds Looney Tunables Vulnerability ...

Learn More
SOCRadar® Cyber Intelligence Inc. | CVE-2023-22515: The Confluence Data Center and Server Vulnerability
Oct 04, 2023
CVE-2023-22515: The Confluence Data Center and Server Vulnerability

CVE-2023-22515: The Confluence Data Center and Server Vulnerability [Update] November 13, 2023: New ‘Effluence’ Backdoor Targets Confluence Data Center and Server Upon Exploiting CVE-2023-22515 and CV...

Learn More
SOCRadar® Cyber Intelligence Inc. | Origin of the Botnets: New Mirai-based Botnet Variants Emerge (hailBot, kiraiBot, and catDDoS)
Oct 04, 2023
Origin of the Botnets: New Mirai-based Botnet Variants Emerge (hailBot...

Origin of the Botnets: New Mirai-based Botnet Variants Emerge (hailBot, kiraiBot, and catDDoS) The landscape of botnet development has been transformed in recent years, thanks to the accessibility of ...

Learn More
SOCRadar® Cyber Intelligence Inc. | CISA Flags Active Exploitation of Mali GPU Drivers Vulnerability: CVE-2023-4211
Oct 03, 2023
CISA Flags Active Exploitation of Mali GPU Drivers Vulnerability: CVE-...

CISA Flags Active Exploitation of Mali GPU Drivers Vulnerability: CVE-2023-4211 In the ever-evolving cybersecurity landscape, adding a vulnerability to CISA’s Known Exploited Vulnerabilities Cat...

Learn More
SOCRadar® Cyber Intelligence Inc. | Cloudflare Protection Bypass Vulnerability on Threat Actors' Radar
Oct 03, 2023
Cloudflare Protection Bypass Vulnerability on Threat Actors' Radar

Cloudflare Protection Bypass Vulnerability on Threat Actors’ Radar Cloudflare, a leading cybersecurity provider, faces a security challenge due to vulnerabilities that could put its customer env...

Learn More
SOCRadar® Cyber Intelligence Inc. | Zero-Day Vulnerabilities in Exim Email Server: Risk of RCE (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117, and More)
Oct 02, 2023
Zero-Day Vulnerabilities in Exim Email Server: Risk of RCE (CVE-2023-4...

Zero-Day Vulnerabilities in Exim Email Server: Risk of RCE (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117, and More) Zero Day Initiative disclosed a total of six zero-day vulnerabilities in the Exim ...

Learn More
SOCRadar® Cyber Intelligence Inc. | 3AM Ransomware: A Modern Threat with a Vintage Twist
Sep 29, 2023
3AM Ransomware: A Modern Threat with a Vintage Twist

3AM Ransomware: A Modern Threat with a Vintage Twist The 3AM ransomware group has recently been spotlighted for its cybercriminal activities. However, why it is the topic of the day is their choice of...

Learn More
SOCRadar® Cyber Intelligence Inc. | ‘Nightmangle’ Telegram C2 Agent and New FUD Crypter with Windows Defender Bypass
Sep 29, 2023
‘Nightmangle’ Telegram C2 Agent and New FUD Crypter with Windows Defen...

‘Nightmangle’ Telegram C2 Agent and New FUD Crypter with Windows Defender Bypass [Update] October 5, 2023: See the subheading: “SPCRYPTER’s Latest Update: No More Trials.” Hackers favor Te...

Learn More
SOCRadar® Cyber Intelligence Inc. | WS_FTP Server Critical Vulnerabilities: What You Need to Know (CVE-2023-40044, CVE-2023-42657)
Sep 29, 2023
WS_FTP Server Critical Vulnerabilities: What You Need to Know (CVE-202...

WS_FTP Server Critical Vulnerabilities: What You Need to Know (CVE-2023-40044, CVE-2023-42657) In the ever-changing landscape of cybersecurity, staying updated with current vulnerabilities is crucial....

Learn More
SOCRadar® Cyber Intelligence Inc. | New Campaign Distributes Malicious npm and PyPI Packages to Pilfer Kubernetes Config, SSH Keys
Sep 28, 2023
New Campaign Distributes Malicious npm and PyPI Packages to Pilfer Kub...

New Campaign Distributes Malicious npm and PyPI Packages to Pilfer Kubernetes Config, SSH Keys Researchers have discovered a concerning surge in deceptive npm and PyPI packages distributed as part of ...

Learn More
SOCRadar® Cyber Intelligence Inc. | Critical Zero-Day Vulnerability in ‘libwebp’: CVE-2023-4863 Reassigned as CVE-2023-5129
Sep 27, 2023
Critical Zero-Day Vulnerability in ‘libwebp’: CVE-2023-4863 Reassigned...

Critical Zero-Day Vulnerability in ‘libwebp’: CVE-2023-4863 Reassigned as CVE-2023-5129 [Update] October 18, 2023: See the subheading: “Fantom Foundation Breached: $550K Crypto Theft Linked to CVE-202...

Learn More
SOCRadar® Cyber Intelligence Inc. | Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploit (CVE-2023-29357)
Sep 27, 2023
Microsoft SharePoint Server Elevation of Privilege Vulnerability Explo...

Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploit (CVE-2023-29357) [Update] January 11, 2024: “SharePoint Vulnerability Has Been Added to the KEV Catalog by CISA” [Update] Sept...

Learn More
SOCRadar® Cyber Intelligence Inc. | What You Need to Know About the Alleged Sony Breach
Sep 26, 2023
What You Need to Know About the Alleged Sony Breach

What You Need to Know About the Alleged Sony Breach The RansomedVC group has announced that it successfully breached Sony, the renowned Japanese multinational electronics giant. The group claims to ha...

Learn More
SOCRadar® Cyber Intelligence Inc. | TeamCity Authentication Bypass Flaw: CVE-2023-42793
Sep 25, 2023
TeamCity Authentication Bypass Flaw: CVE-2023-42793

TeamCity Authentication Bypass Flaw: CVE-2023-42793 [Update] December 14, 2023: See the subheading: “CISA Alerts on APT29 Exploiting TeamCity Vulnerability, CVE-2023-42793.”  [Update] October 6, 2023:...

Learn More
SOCRadar® Cyber Intelligence Inc. | Over 400K Buckets and 10.4B Files Are Public Due to Cloud Misconfigurations
Sep 25, 2023
Over 400K Buckets and 10.4B Files Are Public Due to Cloud Misconfigura...

Over 400K Buckets and 10.4B Files Are Public Due to Cloud Misconfigurations In today’s cloud-centric era, the migration of digital assets to cloud storage has become widespread, driven by the de...

Learn More
SOCRadar® Cyber Intelligence Inc. | Joint Advisory by CISA and FBI: Snatch Ransomware
Sep 21, 2023
Joint Advisory by CISA and FBI: Snatch Ransomware

Joint Advisory by CISA and FBI: Snatch Ransomware The FBI and CISA have recently issued a joint cybersecurity advisory (CSA) concerning the Snatch ransomware variant. The advisory provides comprehensi...

Learn More
SOCRadar® Cyber Intelligence Inc. | Mastodon Vulnerabilities and Critical Zero-Day in TrendMicro’s Apex One, Fixed: CVE-2023-41179, CVE-2023-42451, CVE-2023-42452
Sep 20, 2023
Mastodon Vulnerabilities and Critical Zero-Day in TrendMicro’s Apex On...

Mastodon Vulnerabilities and Critical Zero-Day in TrendMicro’s Apex One, Fixed: CVE-2023-41179, CVE-2023-42451, CVE-2023-42452 Mastodon recently addressed two vulnerabilities, namely CVE-2023-42451 an...

Learn More
SOCRadar® Cyber Intelligence Inc. | GitLab's Critical Security Update: What You Need to Know (CVE-2023-5009)
Sep 20, 2023
GitLab's Critical Security Update: What You Need to Know (CVE-2023-500...

GitLab’s Critical Security Update: What You Need to Know (CVE-2023-5009) GitLab is a widely-used DevOps platform that allows for code hosting, continuous integration, and other collaborative fea...

Learn More
SOCRadar® Cyber Intelligence Inc. | Your Data Is Not Safe: 8Base Deanonymized
Sep 19, 2023
Your Data Is Not Safe: 8Base Deanonymized

Your Data Is Not Safe: 8Base Deanonymized In the ever-evolving world of cybercrime, the 8Base ransomware group has recently come under the spotlight. Known for its victim-shaming website, th...

Learn More
SOCRadar® Cyber Intelligence Inc. | Microsoft AI Repository Exposes 38TB of Data: A Tale in AI and Cloud Security
Sep 19, 2023
Microsoft AI Repository Exposes 38TB of Data: A Tale in AI and Cloud S...

Microsoft AI Repository Exposes 38TB of Data: A Tale in AI and Cloud Security Wiz Research recently unveiled a startling incident involving Microsoft’s AI research team: an accidental exposure o...

Learn More