Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

CVE-2023-22515: The Confluence Data Center and Server Vulnerability SOCRadar

CVE-2023-22515: The Confluence Data Center and Server Vulnerability

[Update] November 13, 2023: New ‘Effluence’ Backdoor Targets Confluence Data Center and Server Upon Exploiting CVE-2023-22515 and CVE-2023-22518 [Update] October 12, 2023: See subheadings: “Storm-0062 APT Exploits Confluence Vulnerability (CVE-2023-22515)”…

Dark Web Profile: Snatch Ransomware SOCRadar

Dark Web Profile: Snatch Ransomware

According to CISA, since the latter part of 2021, the perpetrators behind Snatch Ransomware have persistently adapted their strategies, capitalizing on prevailing tendencies and the operational successes of other ransomware…

Origin of the Botnets: New Mirai-based Botnet Variants Emerge (hailBot, kiraiBot, and catDDoS) SOCRadar

Origin of the Botnets: New Mirai-based Botnet Variants Emerge (hailBot, kiraiBot, and catDDoS)

The landscape of botnet development has been transformed in recent years, thanks to the accessibility of open source code, particularly in the context of Mirai-based trojans. In September 2023, researchers…

CISA Flags Active Exploitation of Mali GPU Drivers Vulnerability: CVE-2023-4211 SOCRadar

CISA Flags Active Exploitation of Mali GPU Drivers Vulnerability: CVE-2023-4211

In the ever-evolving cybersecurity landscape, adding a vulnerability to CISA’s Known Exploited Vulnerabilities Catalog stands as a significant alarm bell. Recently, a critical vulnerability affecting Mali GPU drivers caught CISA’s…

Cloudflare Protection Bypass Vulnerability on Threat Actors' Radar SOCRadar

Cloudflare Protection Bypass Vulnerability on Threat Actors’ Radar

Cloudflare, a leading cybersecurity provider, faces a security challenge due to vulnerabilities that could put its customer environments at risk. Researchers at Certitude have identified vulnerabilities that allow attackers to…

The "Evil" of Everything - Part II: Evilginx and EvilQR Rises AitM SOCRadar

The “Evil” of Everything – Part II: Evilginx and EvilQR Rises AitM

In the ever-evolving landscape of cybersecurity threats, it is imperative to maintain vigilance and adaptability. As we delve deeper into the realm of Adversary-in-the-Middle (AiTM) attacks, the second installment of…

The “Evil” of Everything – Part I: EvilProxy Rises AitM SOCRadar

The “Evil” of Everything – Part I: EvilProxy Rises AitM

In today’s digital era, detecting a burgeoning type of cyberattack, known as Adversary-in-the-Middle (AiTM) attacks, is becoming increasingly challenging. As cyber threat actors continually refine their techniques, organizations find themselves…

Decrypting the Shadows: Revealing the Secrets of Ransomware Operators - An Interview with @htmalgae SOCRadar

Decrypting the Shadows: Revealing the Secrets of Ransomware Operators – An Interview with @htmalgae

Meet @htmalgae, an anonymous security researcher with a wealth of experience in web application development. In the digital realm, htmalgae operates under this unique handle, and in the physical world,…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action