Articles by Yagmur Ernalbant
SOCRadar
CVE-2026-76460: Cisco ISE Flaw Actively Exploited
CVE-2026-76460: Cisco ISE Flaw Actively Exploited CVE-2026-76460 represents a critical security flaw in Cisco’s Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). Because the vulnerability bypas
SOCRadar
CVE-2026-76461: Cisco Email Gateway Flaw Exploited
CVE-2026-76461: Cisco Email Gateway Flaw Exploited Cisco has confirmed active exploitation of CVE-2026-76461 , a critical SQL injection vulnerability in Cisco Secure Email Gateway that can lead to operating-system comman
SOCRadar
CVE-2026-27540 WooCommerce Flaw Exploited
CVE-2026-27540 WooCommerce Flaw Exploited Attackers are actively exploiting CVE-2026-27540 , a critical arbitrary file-upload vulnerability in the WooCommerce Wholesale Lead Capture plugin for WordPress. The flaw allows
SOCRadar
Agentic Ransomware: From Human-Operated to AI-Operated Attacks
Agentic Ransomware: From Human-Operated to AI-Operated Attacks Ransomware has always needed a human involved somewhere: an affiliate navigating a network by hand, or at minimum, a person who wrote the…
SOCRadar
Cisco FMC CVE-2026-20079 Actively Exploited
Cisco FMC CVE-2026-20079 Actively Exploited Cisco has confirmed active exploitation of CVE-2026-20079 , a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC) with a maximum CVSS
SOCRadar
ShieldCrash PoC: Microsoft Defender Fix Bypass
ShieldCrash PoC: Microsoft Defender Fix Bypass Microsoft recently fixed CVE-2026-69414 (ShieldBreak) , a High-severity elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine. Now, Nightmare Eclip
SOCRadar
September 2026 Patch Tuesday: 974 Flaws, 2 Zero-Days
Microsoft’s September 2026 Patch Tuesday release addresses 974 vulnerabilities, including two actively exploited zero-days. Both zero-days are Windows elevation of privilege flaws, and both were added to CISA’s Known Exploited Vulnerabilities (KEV)…
SOCRadar
CVE-2026-73749: HPE ArubaOS-CX RCE
CVE-2026-73749: HPE ArubaOS-CX RCE HPE patched CVE-2026-73749, a critical unauthenticated Remote Code Execution (RCE) vulnerability in HPE Aruba Networking AOS-CX , also known as ArubaOS-CX . The flaw affects an…
SOCRadar
CVE-2026-20212: Cisco Nexus 9000 RCE Flaw
CVE-2026-20212: Cisco Nexus 9000 RCE Flaw Cisco has disclosed a critical vulnerability, CVE-2026-20212, in the Silicon One integration used by certain Nexus 9000 switches. The flaw allows an unauthenticated remote…
SOCRadar
Elementor Pro RCE Flaw Under Active Attack
Elementor Pro RCE Flaw Under Active Attack A critical vulnerability in Elementor Pro, a widely used WordPress page builder plugin, allowed unauthenticated attackers to upload files through the plugin's Forms…
SOCRadar
FalconFlank: CrowdStrike Falcon 0-Day PoC
FalconFlank: CrowdStrike Falcon 0-Day PoC FalconFlank is an alleged privilege escalation zero-day vulnerability in CrowdS t rike Falcon Sensor for Windows , published with working Proof-of-Concept (PoC) code by researche
SOCRadar
JFrog Artifactory CVE-2026-82329 Exploited
JFrog Artifactory CVE-2026-82329 Exploited A critical authentication bypass vulnerability in JFrog Artifactory, tracked as CVE-2026-82329, is under active exploitation, posing an immediate threat to self-managed software