🛑 Sensitive Data of 65,000+ Entities in 111 Countries Leaked due to a Single Misconfigured Data Bucket 🛑
🤯 SOCRadar has detected that sensitive data of 65,000 entities became public because of a misconfigured server.
#dataleak
…
📣
#CISA
has just added SOCRadar Labs to its Resources & Tools. SOCRadar Labs has over 25 FREE tools designed to empower
#SOC
analysts and
#CISOs
.
Don't miss out on strengthening your
#cybersecurity
posture with these top-notch services.
🔗
#darkweb
👣 Cyber threat intelligence tracks illegal activities on the dark web. Analyzing data collected from multiple sources makes the
#darkweb
more intelligible, and potential threats are prevented before they become a problem.
Read more
🔎
#threatintelligence
🔴A new
#ransomware
gang has been identified, which has been active since at least the middle of April. The group is employing
#Conti
ransomware code and using
#Gazprom
name. Interestingly, they also incorporate
#Putin
ASCII art in their
#ransom
notes.
🔗
🔦 SOCRadar’s mission is to use every possible piece of information to identify and prevent cyber threats targeting our platform users.
👇 We hope that the explanations will make the incident and our intentions clearer. 👇
🔴🔴🔴IMPORTANT: “MASSIVE
#RANSOMWARE
ASSAULT UNLEASHED BY DARK SYNDICATE: A $15 MILLION NIGHTMARE”
Today, March 31, in a devastating blow to the heart of the tech world, a newly surfaced threat actor, ominously dubbed the "
#NemesisCollective
," has orchestrated a relentless
📢 Cybercriminals are trying to take advantage of the
#earthquake
that hit
#Turkey
and
#Syria
.
🔻 Our team is working to
#takedown
scams.
🔴 Make sure to report suspicious domains to authorities or our team.
📧 Contact us at takedown
@socradar
.io
Hackers stole personal information connected to both patients and employees in the Canadian healthcare system as part of a cyberattack.
@Socradar
shared information on the data breach as the guest of
@AnthonyGermain
from
@cbc
.
Watch Here👉
#CyberAttack
❓Why Do APTs Prefer to Use
#OpenSource
RATs?
📌Open-source RATs’ free and ready-to-use availability also helps
#APT
groups save time and resources.
🔻They prefer RATs to customize and adapt their attack
#tools
precisely.
To learn more
🔗
🔒BreachForums Seized Again - What's Next in the Fight Against
#Cybercrime
?
🚨 Yesterday, the
#FBI
took control of BreachForums, the successor to RaidForums and Breached, immediately after sensitive data leaked from a Europol portal.
🔗Read more:
🚨 The "regreSSHion" (CVE-2024-6387) exposes millions of Linux OpenSSH servers to Remote Code Execution attacks. Stay protected: update OpenSSH now! Learn more 👇
#cybersecurity
#infosec
#vulnerability
🚨SOCRadar observed Sp1d3r threat actor claiming a new breach involving Neiman Marcus. Allegedly linked to the
#Snowflake
incident, the breach includes 70M transactions, customer details, 50M emails, 12M gift card numbers, and more. Sp1d3r is demanding $150k to stop the sale.
👁️ New
#malvertising
campaign targets Windows administrators using
#PuTTY
and
#WinSCP
!
🎯 Attackers are embedding malicious ads in legitimate websites to distribute malware, compromising admin credentials and system integrity.
👇Learn how to safeguard against this threat
🚀 Join us for our very first "Hack the Quiz: Unleash Your SOC-Skills!"!
📅 March 21
👩🏻💻 Platform: Zoom (via Kahoot!)
😎 Don't miss your chance to win big and show off your
#cyber
prowess! Register now with the link below and let the games begin! 👇
🚨
#Europol
, the EU's law enforcement agency, has reportedly been compromised by "
#IntelBroker
", a member of the CyberNiggers group known for recent major breaches. Sensitive data ranging from employee info to operational guidelines might be exposed. More details 👉
🚩Dealing with threat actors is like a time trial. The fastest one wins!
💯CTI4SOC gathers
#intelligence
from the
#darkweb
and presents it in a context that suits your needs.
💪You can search, analyze, do
#IOC
enrichment, and integrate with other tools.
🎉 Thrilled to announce that SOCRadar has raised $25.2M in Series B funding led by Peak SpanCapital & Oxx! This will enhance our AI-driven cybersecurity solutions.
We aim to expand in the US & EU, boosting our platform to fight ransomware, phishing, & BEC.
🚀 Here is our Press
✨Presenting CVERadar—your go-to source for real-time
#vulnerability
insights and our unique SOCRadar Vulnerability Risk Score, gathered from both the
#darkweb
and surface web.
@SimonByte
, the genius behind
#CVETrends
, has been a guiding light in the
#cybersecurity
world. His
📢
#OWASP
has created a Top 10 list for LLMs. The list highlights LLMs’ most critical security risks, providing developers, researchers, and users with a comprehensive guide to understanding and mitigating these risks.
Read the overview on SOCRadar👇
🔎
#APT
groups may reactivate previously used
#IOCs
, including malicious
#IP
addresses and
#domains
.
🛑 Once used for malicious intent, an
#IOC
always carries potential risk from a
#threatintelligence
standpoint.
SOCRadar delves deep into this issue
👉
👁️ MGM Casino Hack and Realities of Social Engineering Attacks
🔍We invite you to dissect this alarming
#breach
. We will explore further real-life examples of social engineering
#cyberattacks
, providing insights and learning opportunities from each case.
🧑💻Unveiling the impact of
#AI
in
#cybersecurity
with
#HackerGPT
: a potent tool reshaping defense and offense. From proactive threat detection to ethical dilemmas, AI's role in cyberspace is profound.Let's navigate this landscape for a safer digital future
👽 Dark Web Training is now FREE FOR EVERYONE
✅ Register your place now for the free dark web training that will give you everything you need to use and navigate the dark side of the internet. Click the link below to get register:
📢The Forum of Incident Response and Security Teams (
#FIRST
) officially released
#CVSSv4
, marking the next generation of its Common
#Vulnerability
Scoring System standard.
#CVSS
v4.0 incorporates new supplemental metrics and nomenclature.
Learn more👇
🚨
#Clop
has now adopted
#Torrents
as a distribution method for the data. Torrents enable faster transfer speeds through peer-to-peer transfer and offer decentralized distribution, making it difficult for law enforcement to shut down.
Read more 👇
📢 Webinar Alert! 📢
Join us on 27.06.2024 for "Understanding Deepfake Scams and Building Resilience in the Face of AI-Powered Threats" with Ensar Seker.
🕒 Duration: 60 mins
🗣 Learn to identify & combat deepfakes.
Register now ⏬
#CyberSecurity
🚨 Update:
#PoC
exploit for
#FortiOS
SSL
#VPN
vulnerability (CVE-2024-21762) surfaces on a hacker forum. Threat actors can exploit this critical
#RCE
flaw to execute crafted payloads, escalating risks.
#CISA
flagged it in the
#KEV
Catalog for active exploitation.
🔔 BlackCat (ALPHV)
#ransomware
group dealt a second blow to Reddit by adding it to their victim list.
🔎
#Reddit
discovered a
#spearphishing
campaign targeting their employees on the same day.
Read more about the BlackCat on our blog 🔻
#darkweb
🔒 The Man Behind the LockBit Ransomware, identified as Dimitry Yuryevich Khoroshev, aka "putinkrab." Facing a $10 million reward for info leading to his capture, and sanctions from US Treasury & UK. Press release for more info.
#LockBit
#Cybersecurity
⚡️
#LockBit
ransomware's seized leak site reemerges from the shadows, sparking intrigue in cybersecurity! Who is
#LockBitSupp
? The countdown to unmasking them nears its climax, with speculation running wild. Stay tuned for the big reveal at 2024-05-07 14:00:00 UTC! 🥷
Learn more:
⚠️After an Islamophobic incident in
#Sweden
, a new wave of
#cyberattacks
named
#OpSweden
has emerged. Sweden became the target of
#DDoS
attacks by Islamic-oriented hacktivist groups and Russian-based
#hacktivist
groups.
🔻Follow the campaign on SOCRadar:
Critical OS command injection vulnerability in Palo Alto’s GlobalProtect Gateway: CVE-2024-3400 [CVE: 10]. 📌 The crucial point is that the patch is not yet available.
Details here: 👇
#cybersecurity
#panos
#commandinjection
🚨 Active Exploitation of Mali GPU Vulnerability -
#CVE
-2023-4211 - CISA Adds to Known Catalog! Dive into the latest details and stay secure. 🔒
#MaliGPUSecurity
🚀 BIG NEWS!!! SOCRadar secures $25.2M in Series B funding led by
@PeakSpanCapital
, joined by Oxx! This investment fuels our mission to protect against external cyber threats. 🌐
Thank you to our investors, team, and partners. Together, we make the digital world safer!
🎯 SOCRadar's stand-alone cyber threat intelligence solution, CTI4SOC, meets all needs of SOC analysts.
📌 Access now for an extra 500 credits special for the launch!
An Anonymous-linked hacker gang
#AgainstTheWest
started to leak data allegedly stolen from Xiaomi.
The group claims to have thousands of files including the Chinese electronics giant's front/backend SRC's. Previously, it leaked files from Russian Space Research Institute.
🚨 The FBI offers 7,000+ LockBit decryption keys! Victims can now reclaim their data without paying ransoms. If affected, contact the Internet Crime Complaint Center (). More details from FBI Cyber Division Assistant Director Bryan Vorndran at the Boston
👁️SOCRadar uncovered that thousands of
#DICOM
servers were accessible on the internet due to
#misconfigurations
.
#Medical
records of 1,687,673 patients from 25 countries were identified.
💥
#Iran
retaliated against
#Israel
with strikes following an attack on
#Damascus
consulate. The conflict intensifies, tracing back to cyber conflicts since March last year and ongoing tensions with
#Palestine
, marked by increased
#hacktivist
activities.
🔗
📌Whether you’re a beginner just getting started in the field or a professional looking to expand your knowledge, there’s a cybersecurity
#book
for you.
Here are the top ten
#cybersecurity
books that you should
#read
.
📖
🩻
#8Base
#ransomware
has rapidly gained notoriety since its inception in April 2022. In June, it ranked among the top 5 most active groups, announcing 37 victims, as reported by Daily Dark Web.
Check out the
#DarkWeb
Profile of
#8BaseRansomware
:
🔗
🗣 SOCRadar Brazil Threat Landscape Report is out!
👉 This comprehensive analysis sheds light on the cyber threat landscape in Brazil, including dark web activities, ransomware attacks, phishing threats, and the prevalence of Stealer malware.
🌐As the conflict enters its second week,
#hacktivists
are intensifying their efforts. The cyber landscape is witnessing a surge in operations, akin to an uncontrollable avalanche.
Discover the
#cyber
aspect of the
#Israel
-
#Palestine
conflict:
👁️ UPDATE: BreachForums is back online! Despite setbacks like SMTP host blacklisting, NGINX issues, and a Telegram ban, ShinyHunters announced the forum's return. Hollow may take over as the new owner.
👇Learn more updates on this evolving story!
Beware of TeamsPhisher! A new tool has surfaced, exploiting an unresolved security issue in Microsoft Teams. It evades file restrictions, enabling the sending of phishing messages and attachments.
#phishing
#vulnerability
#TeamsPhisher
#MicrosoftTeams
How to Build a SOC with Open Source Solutions?
The SOC is the information security department that continually tracks, analyzes, and enhances the security situation of an enterprise.
#SOC
#SIEM
#ThreatIntelligence
#IncidentResponse
🔥
#IntelBroker
has been exceptionally active lately! From hacking forums to private channels, their recent operations are reshaping cyber intelligence. Don't miss out on the latest dark web updates
🔗
#CyberSecurity
#DarkWebNews
#Europol
⚠️
#ASUS
routers are under risk of
#RCE
attacks!
❓Three critical vulnerabilities found:
#CVE
-2023-39238,
#CVE
-2023-39239,
#CVE
-2023-39240 (CVSS: 9.8)
🔻To learn more about the
#vulnerabilities
, their extent, and how to mitigate them, see our blog:
🔗
💡For detailed insights into NATO's
#cybersecurity
evolution, the significant cybersecurity outcomes of the
#VilniusSummit
, as well as recent
#cyberattacks
targeting
#NATO
, and other noteworthy developments, we invite you to read our blog:
🔗
🙏 One one week ago today, we published an article about the largest B2B leak: "BlueBleed." And it got more than 120 media coverage.
Our CISO, Ensar Seker, spoke to
@SCMagazine
about the BlueBleed leak 👇
#bluebleed
#dataleak
👾 The
#Black
Basta
#ransomware
group exploited CVE-2024-26169 (CVSS: 7.8), a Windows Error Reporting Service vulnerability. Despite
#Microsoft
's March 12 patch, attacks began weeks earlier. Stay informed with SOCRadar’s
#VulnerabilityIntelligence
.
🔍 Details:
🔴 LAST REMINDER! Our exclusive "Understanding
#Deepfake
Scams and Building Resilience in the Face of AI-Powered Threats" webinar is only a couple of hours away! Don't forget to reserve your place. ⏬
#Cybersecurity
#Webinar
📢 Webinar Alert! 📢
Join us on 27.06.2024 for "Understanding Deepfake Scams and Building Resilience in the Face of AI-Powered Threats" with Ensar Seker.
🕒 Duration: 60 mins
🗣 Learn to identify & combat deepfakes.
Register now ⏬
#CyberSecurity
🩻The world of the
#DarkWeb
is as turbulent as a raging sea, and the reason you don’t see it is that there aren’t many outlets for the news.
The
#SOCRadar
team keeps up-to-date on this issue; here are last month's top news picks👇
🛑Researchers discovered an
#SSH
protocol
#vulnerability
,
#Terrapin
(CVE-2023-48795), potentially allowing the interception of sensitive data or administrator control over critical systems.
Receive alerts and insights with SOCRadar👇
#cybersecurity