What's Out There About You on the Dark Web? Scan for Leaks Now
SOCRadar Blog

Cyber Threat Intelligence

Latest SOCRadar research and analysis on Cyber Threat Intelligence: threat reports, advisories and practical guidance for security teams.

Latest articles

KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theft SOCRadar

KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theft

The KeyHunter Operation pairs LLM key theft with an academic fraud campaign that reaches Harvard alumni data, Stanford applications and 18 other universities. SOCRadar’s Threat Research Unit (STRU) attributes the…

Slug: n0n-ransomware-ai-assisted-extortion SOCRadar

n0n Ransomware: Inside an AI-Assisted Extortion Operation

SOCRadar analyzes an exposed n0n ransomware workspace: AI-built tooling, FortiGate credential stuffing, firewall sabotage and 23 compromised organizations…

Australia’s Annual Cyber Threat Report 2025-26 Shows Cyber Incidents Up 20% SOCRadar

Australia’s Annual Cyber Threat Report 2025-26 Shows Cyber Incidents Up 20%

Australia’s cyber security authority responded to 1,524 cyber security incidents in the 2025-26 financial year, a 20% increase from the previous year and a 36% rise over five years. The…

PHP2Shell Weaponized After Japanese Real Estate Extortion SOCRadar

PHP2Shell Weaponized After Japanese Real Estate Extortion

An exposed server ties an extortion wave on about 20 Japanese property sites to an operator who later weaponized PHP2Shell (CVE-2026-109618, CVE-2026-109619)…

PHP2Shell Exploit Tooling Found on Exposed Attacker Server SOCRadar

PHP2Shell Exploit Tooling Found on Exposed Attacker Server

SOCRadar Threat Intelligence Unit (STRU) researchers found PHP2Shell exploit tooling on an attacker-controlled server whose working directory was exposed…

Top RCE Vulnerabilities SOCRadar

Top RCE Vulnerabilities

Top RCE Vulnerabilities A remote code execution (RCE) vulnerability is a software flaw that lets an attacker run their own code on a target system from a remote location. Exploiting…

Turn External Threat Intelligence into Machine-Speed Response with SOCRadar and Torq SOCRadar

Turn External Threat Intelligence into Machine-Speed Response with SOCRadar and Torq

Turn External Threat Intelligence into Machine-Speed Response with SOCRadar and Torq Your Dark Web monitoring just flagged a set of employee credentials for sale. The alarm is accurate, it is…

Inside ICMacOS: From an Infostealer to a Persistent RAT SOCRadar

Inside ICMacOS: From an Infostealer to a Persistent RAT

Inside ICMacOS: From an Infostealer to a Persistent RAT Over the past few years, Apple's enterprise footprint has expanded significantly, with macOS capturing an important share of the global desktop…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action