SOCRadar® Cyber Intelligence Inc. | SAP Security Patch Day May 2024: Critical CVE-2024-33006 Vulnerability Could Lead to System Takeover
May 15, 2024
SAP Security Patch Day May 2024: Critical CVE-2024-33006 Vulnerability...

SAP Security Patch Day May 2024: Critical CVE-2024-33006 Vulnerability Could Lead to System Takeover On May 14, 2024, SAP delivered its monthly security updates, which included 14 new Security Notes a...

Learn More
SOCRadar® Cyber Intelligence Inc. | Microsoft May 2024 Patch Tuesday Highlights: 61 CVEs, Actively Exploited Zero-Days (CVE-2024-30051, CVE-2024-30040)
May 15, 2024
Microsoft May 2024 Patch Tuesday Highlights: 61 CVEs, Actively Exploit...

Microsoft May 2024 Patch Tuesday Highlights: 61 CVEs, Actively Exploited Zero-Days (CVE-2024-30051, CVE-2024-30040) [Update] September 10, 2024: “PoC Exploit Available for Windows DWM Core Libra...

Learn More
SOCRadar® Cyber Intelligence Inc. | Alleged Europol Breach by IntelBroker
May 10, 2024
Alleged Europol Breach by IntelBroker

Alleged Europol Breach by IntelBroker [May 11, 2024] Europol made an announcement confirming the breach and added details. [May 11, 2024] Europol data is allegedly sold to an unknown buyer. Europol, t...

Learn More
SOCRadar® Cyber Intelligence Inc. | BogusBazaar Scams 850K Shoppers Through Fraudulent E-Commerce Sites
May 10, 2024
BogusBazaar Scams 850K Shoppers Through Fraudulent E-Commerce Sites

BogusBazaar Scams 850K Shoppers Through Fraudulent E-Commerce Sites In a recent investigation, researchers exposed an expansive network of fraudulent e-commerce websites that scammed over 850,000 vict...

Learn More
SOCRadar® Cyber Intelligence Inc. | Major Cyber Attacks in Review: April 2024
May 10, 2024
Major Cyber Attacks in Review: April 2024

Major Cyber Attacks in Review: April 2024 April 2024 witnessed major cyber attacks targeting sectors from government bodies to technology firms, emphasizing the ever-present and escalating threats in...

Learn More
SOCRadar® Cyber Intelligence Inc. | Veeam Service Provider Console Affected by Severe RCE Vulnerability: CVE-2024-29212
May 08, 2024
Veeam Service Provider Console Affected by Severe RCE Vulnerability: C...

Veeam Service Provider Console Affected by Severe RCE Vulnerability: CVE-2024-29212 Veeam has recently disclosed a significant security vulnerability within Veeam Service Provider Console (VSPC), iden...

Learn More
SOCRadar® Cyber Intelligence Inc. | New High-Severity Vulnerability in Apache ActiveMQ Poses Risk of Unauthorized Access: CVE-2024-32114
May 03, 2024
New High-Severity Vulnerability in Apache ActiveMQ Poses Risk of Unaut...

New High-Severity Vulnerability in Apache ActiveMQ Poses Risk of Unauthorized Access: CVE-2024-32114 A high-severity vulnerability, CVE-2024-32114, has been discovered in Apache ActiveMQ, potentially ...

Learn More
SOCRadar® Cyber Intelligence Inc. | Latin America Under Threat: The Venom RAT Campaign's Cyber Invasion Initiative
Apr 30, 2024
Latin America Under Threat: The Venom RAT Campaign's Cyber Invasion In...

Latin America Under Threat: The Venom RAT Campaign’s Cyber Invasion Initiative In Latin America, there is a significant cyber threat posed by the Venom RAT campaign, necessitating swift and decisive a...

Learn More
SOCRadar® Cyber Intelligence Inc. | ShadowRay Campaign Exploits Critical Ray Framework Vulnerabilities to Compromise AI Workloads Globally
Apr 26, 2024
ShadowRay Campaign Exploits Critical Ray Framework Vulnerabilities to ...

ShadowRay Campaign Exploits Critical Ray Framework Vulnerabilities to Compromise AI Workloads Globally Since September 5, 2023, a sophisticated cyber threat named the ‘ShadowRay’ campaign has targeted...

Learn More
SOCRadar® Cyber Intelligence Inc. | APT28 Deploys ‘GooseEgg’ in Attacks Exploiting the Windows Print Spooler Vulnerability, CVE-2022-38028
Apr 24, 2024
APT28 Deploys ‘GooseEgg’ in Attacks Exploiting the Windows Print Spool...

APT28 Deploys ‘GooseEgg’ in Attacks Exploiting the Windows Print Spooler Vulnerability, CVE-2022-38028 Microsoft recently shed light on a campaign orchestrated by the Russian-based threat actor Forest...

Learn More
SOCRadar® Cyber Intelligence Inc. | OpenMetadata Vulnerabilities Allow Attackers to Cryptomine in Kubernetes Environments
Apr 18, 2024
OpenMetadata Vulnerabilities Allow Attackers to Cryptomine in Kubernet...

OpenMetadata Vulnerabilities Allow Attackers to Cryptomine in Kubernetes Environments Recent findings from a Microsoft security blog reveal that attackers exploit newly discovered critical vulnerabili...

Learn More
SOCRadar® Cyber Intelligence Inc. | CVE-2024-21006 in Oracle WebLogic Server – Oracle’s April 2024 Update Brings 441 New Security Patches
Apr 17, 2024
CVE-2024-21006 in Oracle WebLogic Server – Oracle’s April 2024 Update ...

CVE-2024-21006 in Oracle WebLogic Server – Oracle’s April 2024 Update Brings 441 New Security Patches Oracle has released its Critical Patch Update advisory for April 2024, which addresses vulnerabili...

Learn More
SOCRadar® Cyber Intelligence Inc. | Committing a Sin, OpenJS Foundation and XZ Utils Incidents: Lessons in Open Source Security
Apr 17, 2024
Committing a Sin, OpenJS Foundation and XZ Utils Incidents: Lessons in...

Committing a Sin, OpenJS Foundation and XZ Utils Incidents: Lessons in Open Source Security Recent events have brought to light critical issues related to cybersecurity threats and social engineering ...

Learn More
SOCRadar® Cyber Intelligence Inc. | Ivanti Avalanche Received an Update for Over Two Dozen Vulnerabilities (CVE-2024-24996, CVE-2024-29204…)
Apr 17, 2024
Ivanti Avalanche Received an Update for Over Two Dozen Vulnerabilities...

Ivanti Avalanche Received an Update for Over Two Dozen Vulnerabilities (CVE-2024-24996, CVE-2024-29204…) Ivanti has recently issued security updates to address multiple vulnerabilities in Avalanche. T...

Learn More
SOCRadar® Cyber Intelligence Inc. | Major Cyber Attacks in Review: March 2024
Apr 16, 2024
Major Cyber Attacks in Review: March 2024

Major Cyber Attacks in Review: March 2024 March 2024 witnessed a wave of cyber attacks targeting prominent organizations globally. From telecommunications giants to government pension funds, several h...

Learn More
SOCRadar® Cyber Intelligence Inc. | Cyber Reflections of Iran's Attack on Israel
Apr 15, 2024
Cyber Reflections of Iran's Attack on Israel

Cyber Reflections of Iran’s Attack on Israel [Update] April 22, 2024: “Israeli Hackers Strike Back: Cyber Av3ngers Hacked” [Update] April 17, 2024: “Ongoing Hacktivist Activities” On Saturday and earl...

Learn More
SOCRadar® Cyber Intelligence Inc. | Critical PHP Vulnerabilities: Update Now to Prevent Takeovers and Command Injection (CVE-2024-1874, CVE-2024-2756, CVE-2024-3096, CVE-2024-2757)
Apr 15, 2024
Critical PHP Vulnerabilities: Update Now to Prevent Takeovers and Comm...

Critical PHP Vulnerabilities: Update Now to Prevent Takeovers and Command Injection (CVE-2024-1874, CVE-2024-2756, CVE-2024-3096, CVE-2024-2757) The PHP development team recently announced security up...

Learn More
SOCRadar® Cyber Intelligence Inc. | Critical OS Command Injection Vulnerability in Palo Alto's GlobalProtect Gateway: CVE-2024-3400. The patch is not available yet.
Apr 12, 2024
Critical OS Command Injection Vulnerability in Palo Alto's GlobalProte...

Critical OS Command Injection Vulnerability in Palo Alto’s GlobalProtect Gateway: CVE-2024-3400. The patch is not available yet. [Update] April 17, 2024: “PoC Exploit Available for CVE-2024-3400: Rese...

Learn More
SOCRadar® Cyber Intelligence Inc. | Microsoft’s April 2024 Patch Tuesday, 149 Vulnerabilities Patched, Including 2 Zero-Day Vulnerabilities
Apr 10, 2024
Microsoft’s April 2024 Patch Tuesday, 149 Vulnerabilities Patched, Inc...

Microsoft’s April 2024 Patch Tuesday, 149 Vulnerabilities Patched, including 2 Zero-Day Vulnerabilities Microsoft’s April 2024 Patch Tuesday was a substantial release addressing a total of 149 securit...

Learn More
SOCRadar® Cyber Intelligence Inc. | Ivanti Connect Secure and Policy Secure Gateways Vulnerable to DoS and Code Execution (CVE-2024-21894)
Apr 04, 2024
Ivanti Connect Secure and Policy Secure Gateways Vulnerable to DoS and...

Ivanti Connect Secure and Policy Secure Gateways Vulnerable to DoS and Code Execution (CVE-2024-21894) Ivanti recently released patches to fix multiple vulnerabilities found in their popular Connect S...

Learn More