SOCRadar® Cyber Intelligence Inc. | Latest Zero-Day Vulnerabilities: UNC4841 Targets Barracuda ESG with CVE-2023-7102, Apache OFBiz Authentication Bypass (CVE-2023-51467)
Dec 28, 2023
Latest Zero-Day Vulnerabilities: UNC4841 Targets Barracuda ESG with CV...

Latest Zero-Day Vulnerabilities: UNC4841 Targets Barracuda ESG with CVE-2023-7102, Apache OFBiz Authentication Bypass (CVE-2023-51467) The UNC4841 group, linked to China, is targeting Barracuda Email ...

Learn More
SOCRadar® Cyber Intelligence Inc. | Weekly Vulnerability Summary by CISA: Ivanti Avalanche, Apache Dubbo, OpenSSH, and More
Dec 27, 2023
Weekly Vulnerability Summary by CISA: Ivanti Avalanche, Apache Dubbo, ...

Weekly Vulnerability Summary by CISA: Ivanti Avalanche, Apache Dubbo, OpenSSH, and More The Cybersecurity and Infrastructure Security Agency (CISA) has released a new vulnerability summary for the lat...

Learn More
SOCRadar® Cyber Intelligence Inc. | Challenge of Protecting PII, Hunters Become the Hunt: OpenAI Vulnerability, Blackmailing of Bounty Hunters
Dec 26, 2023
Challenge of Protecting PII, Hunters Become the Hunt: OpenAI Vulnerabi...

Challenge of Protecting PII, Hunters Become the Hunt: OpenAI Vulnerability, Blackmailing of Bounty Hunters A paradox emerges: those who protect us from cyber threats are themselves becoming the hunted...

Learn More
SOCRadar® Cyber Intelligence Inc. | CISA Updates: Microsoft 365 Guidance, SCuBAGear Tool, Mozilla Alert, QNAP & FXC Vulnerabilities Enter KEV
Dec 22, 2023
CISA Updates: Microsoft 365 Guidance, SCuBAGear Tool, Mozilla Alert, Q...

CISA Updates: Microsoft 365 Guidance, SCuBAGear Tool, Mozilla Alert, QNAP & FXC Vulnerabilities Enter KEV CISA has officially released the Microsoft 365 Secure Configuration Baselines, aiming to a...

Learn More
SOCRadar® Cyber Intelligence Inc. | Massive Data Leak by BidenCash: 1.9M Credit Card Details Exposed on Hacker Forum
Dec 21, 2023
Massive Data Leak by BidenCash: 1.9M Credit Card Details Exposed on Ha...

Massive Data Leak by BidenCash: 1.9M Credit Card Details Exposed on Hacker Forum The SOCRadar Dark Web Team detected a significant data breach on a hacker forum, revealing the leak of 1.9 million cred...

Learn More
SOCRadar® Cyber Intelligence Inc. | Over a Dozen Critical RCE Vulnerabilities in Ivanti Avalanche; Actively Exploited Chrome Zero-Day, CVE-2023-7024
Dec 21, 2023
Over a Dozen Critical RCE Vulnerabilities in Ivanti Avalanche; Activel...

Over a Dozen Critical RCE Vulnerabilities in Ivanti Avalanche; Actively Exploited Chrome Zero-Day, CVE-2023-7024 Ivanti has issued security updates to address a total of 22 vulnerabilities identified...

Learn More
SOCRadar® Cyber Intelligence Inc. | ALPHV Seized, Unseized, Decrypted; Pandora's Box May Be Reopened
Dec 20, 2023
ALPHV Seized, Unseized, Decrypted; Pandora's Box May Be Reopened

ALPHV Seized, Unseized, Decrypted; Pandora’s Box May Be Reopened Emerging as a significant player in the ransomware landscape, ALPHV (BlackCat) has established itself through sophisticated ranso...

Learn More
SOCRadar® Cyber Intelligence Inc. | Microsoft Alerts of RCE and DoS Vulnerabilities in Perforce Server: CVE-2023-45849, CVE-2023-35767, CVE-2023-45319, CVE-2023-5759
Dec 19, 2023
Microsoft Alerts of RCE and DoS Vulnerabilities in Perforce Server: CV...

Microsoft Alerts of RCE and DoS Vulnerabilities in Perforce Server: CVE-2023-45849, CVE-2023-35767, CVE-2023-45319, CVE-2023-5759 During a security review of its game development studios, Microsoft fo...

Learn More
SOCRadar® Cyber Intelligence Inc. | FortiGuard Releases Security Updates for Critical Vulnerabilities in Multiple Products Introduction to the Vulnerabilities
Dec 15, 2023
FortiGuard Releases Security Updates for Critical Vulnerabilities in M...

FortiGuard Releases Security Updates for Critical Vulnerabilities in Multiple Products Introduction to the Vulnerabilities On December 12, 2023, FortiGuard announced the release of security updates to...

Learn More
SOCRadar® Cyber Intelligence Inc. | CISA Urges Organizations to Patch the Critical Apache Struts RCE Vulnerability, CVE-2023-50164
Dec 14, 2023
CISA Urges Organizations to Patch the Critical Apache Struts RCE Vulne...

CISA Urges Organizations to Patch the Critical Apache Struts RCE Vulnerability, CVE-2023-50164 In a recent alert, the Cybersecurity and Infrastructure Security Agency (CISA) highlighted that the Apach...

Learn More
SOCRadar® Cyber Intelligence Inc. | Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 Critical, and a Non-Microsoft Zero-Day
Dec 13, 2023
Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 ...

Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 Critical, and a Non-Microsoft Zero-Day Microsoft has released its December 2023 Patch Tuesday, addressing a total of 36 ...

Learn More
SOCRadar® Cyber Intelligence Inc. | Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 Critical, and a Non-Microsoft Zero-Day
Dec 13, 2023
Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 ...

Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 Critical, and a Non-Microsoft Zero-Day Microsoft has released its December 2023 Patch Tuesday, addressing a total of 36 security v...

Learn More
SOCRadar® Cyber Intelligence Inc. | Weekly Vulnerability Summary by CISA: Android, Microsoft, CMS Software, WordPress, Perl, and More
Dec 12, 2023
Weekly Vulnerability Summary by CISA: Android, Microsoft, CMS Software...

Weekly Vulnerability Summary by CISA: Android, Microsoft, CMS Software, WordPress, Perl, and More The Cybersecurity and Infrastructure Security Agency (CISA) has released a summary of the most recent ...

Learn More
SOCRadar® Cyber Intelligence Inc. | Syrus4 IoT Gateway Vulnerability Could Allow Code Execution on Thousands of Vehicles, Simultaneously (CVE-2023-6248)
Dec 08, 2023
Syrus4 IoT Gateway Vulnerability Could Allow Code Execution on Thousan...

Syrus4 IoT Gateway Vulnerability Could Allow Code Execution on Thousands of Vehicles, Simultaneously (CVE-2023-6248) A significant vulnerability affecting Syrus4 IoT Gateway has emerged, posing a seri...

Learn More
SOCRadar® Cyber Intelligence Inc. | Latest Alerts for WordPress: POP Chain Leading to Site Takeover, Backdoor-Distributing Phishing Campaign
Dec 07, 2023
Latest Alerts for WordPress: POP Chain Leading to Site Takeover, Backd...

Latest Alerts for WordPress: POP Chain Leading to Site Takeover, Backdoor-Distributing Phishing Campaign On December 6, 2023, WordPress rolled out version 6.4.2, addressing a vulnerability introduced ...

Learn More
SOCRadar® Cyber Intelligence Inc. | Why Should Companies Choose Cybersecurity Providers with ISO 27001 and SOC 2 Certifications?
Dec 07, 2023
Why Should Companies Choose Cybersecurity Providers with ISO 27001 and...

Why Should Companies Choose Cybersecurity Providers with ISO 27001 and SOC 2 Certifications? Cyber threats are evolving at an unprecedented pace, and businesses must prioritize partnering with cyberse...

Learn More
SOCRadar® Cyber Intelligence Inc. | December 2023 Android Security Bulletin: Critical and Potentially Exploited Vulnerabilities, Google Pixel Update
Dec 06, 2023
December 2023 Android Security Bulletin: Critical and Potentially Expl...

December 2023 Android Security Bulletin: Critical and Potentially Exploited Vulnerabilities, Google Pixel Update Google has released the December 2023 Android Security Bulletin. Despite the bulletin b...

Learn More
SOCRadar® Cyber Intelligence Inc. | New CISA Advisory: Threat Actors Exploited Adobe ColdFusion Vulnerability (CVE-2023-26360) to Target Government Servers
Dec 06, 2023
New CISA Advisory: Threat Actors Exploited Adobe ColdFusion Vulnerabil...

New CISA Advisory: Threat Actors Exploited Adobe ColdFusion Vulnerability (CVE-2023-26360) to Target Government Servers The Cybersecurity and Infrastructure Security Agency (CISA) has issued a Cyberse...

Learn More
SOCRadar® Cyber Intelligence Inc. | Phishing in E-commerce: Understanding Digital Threats Effectively
Dec 06, 2023
Phishing in E-commerce: Understanding Digital Threats Effectively

Phishing in E-commerce: Understanding Digital Threats Effectively In the rapidly evolving digital marketplace, the threat of phishing in e-commerce has become a critical concern. To navigate these tre...

Learn More
SOCRadar® Cyber Intelligence Inc. | Critical RCE Vulnerabilities in Atlassian Products: CVE-2022-1471, CVE-2023-22522, CVE-2023-22524, and CVE-2023-22523
Dec 06, 2023
Critical RCE Vulnerabilities in Atlassian Products: CVE-2022-1471, CVE...

Critical RCE Vulnerabilities in Atlassian Products: CVE-2022-1471, CVE-2023-22522, CVE-2023-22524, and CVE-2023-22523 [Update] December 11, 2023: “CISA Urges Swift Action on Critical Atlassian Vulnera...

Learn More