PHP2Shell: 2 x CVSS 9.2 flaws in PHP may allow RCE! Read Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain SOCRadar

Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain

Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain The SOCRadar Threat Research Unit (STRU) has conducted an "inside-out" analysis of AnonyMousKIT , an AI-powered Phishing-as-a-Service (PhaaS) ecosystem specifically en

Imobiliare.ro, Klark.ai, Fortinet VPN, E-Commerce Skimming, and Solimut SQLi SOCRadar

Imobiliare.ro, Klark.ai, Fortinet VPN, E-Commerce Skimming, and Solimut SQLi

Imobiliare.ro, Klark.ai, Fortinet VPN, E-Commerce Skimming, and Solimut SQLi SOCRadar Dark Web Team identified several new underground posts involving alleged database leaks, exposed remote access, and access-for-sale ac

Cisco Crosswork, Secure Workload CVEs Patched SOCRadar

Cisco Crosswork, Secure Workload CVEs Patched

Cisco Crosswork, Secure Workload CVEs Patched Cisco released security updates for Cisco Crosswork and Cisco Secure Workload , addressing nine vulnerabilities across the two product families. The updates include five…

CVE-2026-19478: GitLab GraphQL Flaw Exploited SOCRadar

CVE-2026-19478: GitLab GraphQL Flaw Exploited

CVE-2026-19478: GitLab GraphQL Flaw Exploited GitLab has patched CVE-2026-19478 , a critical code injection vulnerability affecting self-managed Community Edition (CE) and Enterprise Edition (EE) instances. Under certain

CVE-2026-69836: Microsoft Entra ID RCE Exploited SOCRadar

CVE-2026-69836: Microsoft Entra ID RCE Fixed

CVE-2026-69836: Microsoft Entra ID RCE Exploited Microsoft has disclosed CVE-2026-69836 , a maximum-severity Remote Code Execution (RCE) vulnerability in Microsoft Entra ID , the cloud identity and access management serv

ShinyHunters Claims ReliaQuest Breach SOCRadar

ShinyHunters Claims ReliaQuest Breach

ShinyHunters Claims ReliaQuest Breach A ShinyHunters -associated leak site listed ReliaQuest on August 23, 2026, raising questions about a potential data extortion attempt against the cybersecurity provider. No evidence

CVE-2026-73570: Zimbra RCE Exploited SOCRadar

CVE-2026-73570: Zimbra RCE Exploited

CVE-2026-73570: Zimbra RCE Exploited Zimbra Collaboration Suite (ZCS) faces an actively exploited command-injection vulnerability, identified as CVE-2026-73570 . This flaw affects the suite's SNMP notification processing

CVE-2026-19490: NetScaler Auth Bypass Patched SOCRadar

CVE-2026-19490: NetScaler Auth Bypass Patched

CVE-2026-19490: NetScaler Auth Bypass Patched Cloud Software Group released a critical security bulletin for customer-managed NetScaler ADC and NetScaler Gateway deployments, fixing two vulnerabilities: CVE-2026-19490 ,

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action