Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Dark Web Profile: Patchwork APT SOCRadar

Dark Web Profile: Patchwork APT

The Patchwork APT group, identified in December 2015 but probably active since 2009, is a cyber espionage entity suspected to be based in India. It targets a variety of high-profile…

LAX and Generali Database Leaks, US Credit Card Sales, Unauthorized Accesses, and Recruitment Posts SOCRadar

LAX and Generali Database Leaks, US Credit Card Sales, Unauthorized Accesses, and Recruitment Posts

Discover the latest revelations from the SOCRadar Dark Web Team, exposing a myriad of security breaches. From leaked databases of prestigious organizations like Los Angeles International Airport and the Generali Group to…

Attack Surface Management with Open-Source Tools and Services SOCRadar

Attack Surface Management with Open-Source Tools and Services

As the first line of defense against cyber attacks, adept attack surface management is critical in reducing the chance of a successful breach, protecting firms from the possible consequences of…

Dark Peep #11: The Final Curtain for LockBit Ransomware (Operation Cronos) SOCRadar

Dark Peep #11: The Final Curtain for LockBit Ransomware (Operation Cronos)

Digital Olympians and seekers of cyber lore! “Dark Peep #11” unfurls its scroll to reveal tales of cunning, courage, and chaos in the digital Olympus, where modern-day Titans clash not…

Shadow Ops Exposed: Inside the Leak of China's i-Soon Cyber Espionage Empire SOCRadar

Shadow Ops Exposed: Inside the Leak of China’s i-Soon Cyber Espionage Empire

Chinese authorities, law enforcement agencies, cybersecurity researchers, and a whole lot of other people are investigating an unprecedented online leak of documents from a private security firm. A vast amount…

Critical Vulnerabilities in ConnectWise ScreenConnect, PostgreSQL JDBC, and VMware EAP (CVE-2024-1597, CVE-2024-22245) SOCRadar

Critical Vulnerabilities in ConnectWise ScreenConnect, PostgreSQL JDBC, and VMware EAP (CVE-2024-1597, CVE-2024-22245)

[Update] March 5, 2024: “Kimsuky Takes Advantage of ScreenConnect Vulnerabilities” [Update] February 28, 2024: “Black Basta and Bl00dy Exploit the Critical ScreenConnect Vulnerability in Ransomware Attacks,” “Phishing Campaign Leverages ScreenConnect…

Using Jupyter Notebook for CTI using PyMISP SOCRadar

Using Jupyter Notebook for CTI using PyMISP

In Cyber Threat Intelligence (CTI), Jupyter Notebook and PyMISP are transformative tools. Just as Bash commands empower defenders, these platforms offer dynamic solutions for analyzing threats, collaborating effectively, and fortifying cyber…

weekly-vulnerability-summary-by-cisa-february-12-2024-new-ics-advisories SOCRadar

Weekly Vulnerability Summary by CISA – February 12, 2024; New ICS Advisories

The Cybersecurity and Infrastructure Security Agency (CISA) has once again issued a summary of the latest vulnerabilities. The latest CISA weekly vulnerability summary lists vulnerabilities identified between February 9 and February…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action