SOCRadar
Featured
PHP2Shell: CVE-2026-109618 & CVE-2026-109619
[Update] October 21, 2026, 14:00 UTC: PHP has released fixes for both vulnerabilities. See the subheading “PHP Releases Patches for PHP2Shell.” PHP2Shell is the name researchers now use for two critical vulnerabilities in PHP, the server-side language behind WordPress, Drupal, Magento, Laravel, and many custom…
Editor's picks.
Latest articles
SOCRadar
eMudhra CA Key Compromise: Weak Keys, Risks and Fixes
The eMudhra CA key compromise is a certificate authority (CA) security incident in which eight intermediate certificates issued by eMudhra, an Indian digital trust provider, carried private keys that anyone…
SOCRadar
Drupal Patches Critical RCEs: CVE-2026-108097 & 108099
Drupal has patched two critical remote code execution (RCE) vulnerabilities affecting Drupal core and the contributed Entity List module. The first flaw, tracked CVE-2026-108097, affects the core Field UI module,…
SOCRadar
ConnectWise Cloud Backup Breach: What We Know
ConnectWise is investigating unauthorized access to application identities associated with Cloud Backup, formerly SkyKick, after researchers detected the applications authenticating into customer Microsoft 365 environments. A vendor-controlled Microsoft 365 application…
SOCRadar
ZoomInfo Sale, TryCircle, Vicente López, HDB, and X Leaks
SOCRadar Dark Web Team identified several underground posts, including an alleged ZoomInfo database sale involving 185 million records, an alleged TryCircle customer data leak, and an alleged Vicente López municipal…
SOCRadar
CVE-2026-102764: BeyondTrust Zero-Day Exploited
BeyondTrust has disclosed CVE-2026-102764, a critical Remote Support vulnerability exploited as a zero-day weeks before customers received a patch. The attack began on August 29, 2026, when one BeyondTrust-hosted Remote…
SOCRadar
Cisco Secure Email & PAN-OS Zero-Days Exploited
Cisco Secure Email & PAN-OS Zero-Days Exploited Cisco and Palo Alto Networks have patched two actively exploited zero-day vulnerabilities that can lead to root-level code execution on security appliances. CISA…
SOCRadar
SOCRadar Splunk Integration: New MSSP and Vulnerability Apps
SOCRadar Splunk Integration: New MSSP and Vulnerability Apps Your analysts live in Splunk. Your external risk does not: SOCRadar alarms for dozens of managed companies, and vulnerability findings across an…
SOCRadar
CVE-2026-105445: Docker Hub PAT Reassignment Flaw
CVE-2026-105445: Docker Hub PAT Reassignment Flaw Docker has disclosed CVE-2026-105445 , a critical privilege assignment flaw in Docker Hub that could allow an attacker to reuse a personal access token…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action