PHP2Shell: 2 x CVSS 9.2 flaws in PHP may allow RCE! Read Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest Popular Trending

Latest articles

CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT SOCRadar

CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT

CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT One of the most common entry points for attackers is the exploitation of public-facing edge devices (such as VPNs, routers, and firewalls).
FBI Investigates Nexus Claim of 153M+ Driver’s License Records SOCRadar

FBI Investigates Nexus Claim of 153M+ Driver’s License Records

FBI Investigates Nexus Claim of 153M+ Driver’s License Records A Dark Web service called Nexus has claimed to offer access to more than 153 million driver’s license records from the…
StyleSmuggler: Unpatched Magento and Adobe Commerce Zero-Day Exploited SOCRadar

StyleSmuggler: Unpatched Magento and Adobe Commerce Zero-Day Exploited

StyleSmuggler: Unpatched Magento and Adobe Commerce Zero-Day Exploited Attackers are actively exploiting an unpatched zero-day vulnerability in Magento Open Source and Adobe Commerce that allows unauthenticated remote co
Bring Licensed Threat Intelligence into Every Conversation with SOCRadar and ChatGPT SOCRadar

Bring Licensed Threat Intelligence into Every Conversation with SOCRadar and ChatGPT

Bring Licensed Threat Intelligence into Every Conversation with SOCRadar and ChatGPT The SOCRadar Threat Intelligence MCP app connects ChatGPT to the SOCRadar MCP server over OAuth, exposing your licensed intelligence…
E-Commerce Access, Vedicline Data, Langflow RCE, ASUS Claim, and Energy Shell Access SOCRadar

E-Commerce Access, Vedicline Data, Langflow RCE, ASUS Claim, and Energy Shell Access

E-Commerce Access, Vedicline Data, Langflow RCE, ASUS Claim, and Energy Shell Access SOCRadar Dark Web Team identified several new underground posts, including an alleged Bangladeshi e-commerce customer database, and a…
N-able N-central HF4 Fixes Critical RCE After Series of Authentication Flaws SOCRadar

N-able N-central HF4 Fixes Critical RCE After Series of Authentication Flaws

N-able N-central HF4 Fixes Critical RCE After Series of Authentication Flaws N-able has released N-central 2026.3 Hotfix 4 (build 2026.3.1.14) to fix CVE-2026-86218, a critical pre-authentication remote code execution vu
CVE-2026-73749: HPE ArubaOS-CX RCE SOCRadar

CVE-2026-73749: HPE ArubaOS-CX RCE

CVE-2026-73749: HPE ArubaOS-CX RCE HPE patched CVE-2026-73749, a critical unauthenticated Remote Code Execution (RCE) vulnerability in HPE Aruba Networking AOS-CX , also known as ArubaOS-CX . The flaw affects an…
CVE-2026-20212: Cisco Nexus 9000 RCE Flaw SOCRadar

CVE-2026-20212: Cisco Nexus 9000 RCE Flaw

CVE-2026-20212: Cisco Nexus 9000 RCE Flaw Cisco has disclosed a critical vulnerability, CVE-2026-20212, in the Silicon One integration used by certain Nexus 9000 switches. The flaw allows an unauthenticated remote…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action