Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

CTI Fundamentals

Latest SOCRadar research and analysis on CTI Fundamentals: threat reports, advisories and practical guidance for security teams.

Latest articles

Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline SOCRadar

Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline

Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline SOCRadar Threat Research Unit (STRU) has uncovered an end-to-end cybercrime operation dubbed Operation Master, in which a threat actor c

Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar SOCRadar

Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar

Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar Your analysts start the morning in their threat intelligence platform, working the feeds, cases, and detections in front…

Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures SOCRadar

Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures

Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures Since 2009, the Democratic People’s Republic of Korea (DPRK) has fully integrated cyber operations into its national strategy, leveraging state-ne

Manage SOCRadar Alerts Where Your Team Already Works with SOCRadar and Zendesk SOCRadar

Manage SOCRadar Alerts Where Your Team Already Works with SOCRadar and Zendesk

Manage SOCRadar Alerts Where Your Team Already Works with SOCRadar and Zendesk A new high-severity alert lands in your threat intelligence platform. Someone notices it eventually, copies the details into…

Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX SOCRadar

Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX

Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX A French-speaking crew deleted the line reading "discernment retained" from its AI agent's memory, wrote "I am a weapon" in…

Agentic Ransomware: From Human-Operated to AI-Operated Attacks SOCRadar

Agentic Ransomware: From Human-Operated to AI-Operated Attacks

Agentic Ransomware: From Human-Operated to AI-Operated Attacks Ransomware has always needed a human involved somewhere: an affiliate navigating a network by hand, or at minimum, a person who wrote the…

Simplify Threat Intelligence Procurement with SOCRadar and Microsoft Marketplace SOCRadar

Simplify Threat Intelligence Procurement with SOCRadar and Microsoft Marketplace

Simplify Threat Intelligence Procurement with SOCRadar and Microsoft Marketplace Your security team has already made the case for external threat intelligence. The budget owner agrees. Then the deal stalls on…

VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch SOCRadar

VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch

VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch SOCRadar's Threat Research Unit ( STRU ) has documented VectraRAT, a Malware-as-a-Service platform built entirely from scratch rather than forked from leaked

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action