Latest articles
SOCRadar
CVE-2026-86950: Apple CoreGraphics Zero-Day
CVE-2026-86950: Apple CoreGraphics Zero-Day Apple has issued an urgent security patch for CVE-2026-86950 , a critical zero-day out-of-bounds write vulnerability in CoreGraphics that enables arbitrary code execution via m
SOCRadar
Citrix NetScaler Zero-Days FAQ: CVE-2026-88771 & 88772
Citrix NetScaler Zero-Days FAQ: CVE-2026-88771 & 88772 Citrix has released emergency security updates for eight vulnerabilities affecting customer-managed NetScaler ADC and NetScaler Gateway appliances, including two cri
SOCRadar
Operation Talked: A Russia-Linked Cyber Espionage Campaign Targeting Ukraine’s Defense Industry
Operation Talked: A Russia-Linked Cyber Espionage Campaign Targeting Ukraine's Defense Industry TL;DR: OPERATION TALKED is an ongoing Russia-linked espionage campaign, exposed after the actor left their own C2 as an…
SOCRadar
Roundcube SQLi (CVE-2026-48842) Exploited
Roundcube SQLi (CVE-2026-48842) Exploited A pre-authentication SQL injection vulnerability in Roundcube Webmail is reportedly being exploited in the wild months after patches became available. Tracked as CVE-2026-48842 ,
SOCRadar
Check Point Pre-Auth Flaws Under Attack
Check Point Pre-Auth Flaws Under Attack Check Point has warned that two critical, pre-authentication vulnerabilities affecting its security products are being actively exploited. CVE-2026-85102 affects VPN certificate ha
SOCRadar
CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation
CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation F5 has released emergency engineering hotfixes for CVE-2026-94127 , a critical heap-based buffer overflow in BIG-IP Access Policy Manager (APM). The vulnerabili
SOCRadar
ShinyHunters Claims Access to FBI Systems
ShinyHunters Claims Access to FBI Systems Days after hijacking Clop's Dark Web leak site, ShinyHunters claims it breached the FBI, defaced part of its recruitment website, and stole sensitive information…
SOCRadar
CVE-2026-87902 in WordPress Enables Conditional RCE
CVE-2026-87902 in WordPress Enables Conditional RCE Security updates released for WordPress address CVE-2026-87902 , a severe unauthenticated path traversal flaw within its page-template resolution mechanism. The weaknes
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action