Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Microsoft’s August 2023 Patch Tuesday Fixes Six Critical Vulnerabilities and Two Exploited Zero-Days SOCRadar

Microsoft’s August 2023 Patch Tuesday Fixes Six Critical Vulnerabilities and Two Exploited Zero-Days

Microsoft’s August 2023 Patch Tuesday has just arrived. The update addresses a total of 74 vulnerabilities, six of which have critical severity, and two zero-days that are actively exploited. Additionally,…

Complex RCE Vulnerability (CVE-2023-39143) in PaperCut Application Servers SOCRadar

Complex RCE Vulnerability (CVE-2023-39143) in PaperCut Application Servers

PaperCut NG and PaperCut MF are extensively utilized software solutions for print management servers. CVE-2023-39143 refers to path traversal vulnerabilities found in PaperCut NG and PaperCut MF versions released prior…

Dark Web Profile: Big Head Ransomware SOCRadar

Dark Web Profile: Big Head Ransomware

While ransomware groups such as ALPHV and Lockbit 3.0 continue to hit big companies and make headlines with the large-sized files they steal, there are also actors who do not…

Dark Web Sales: Unauthorized Citrix Access, Credit Cards, and Student Documents SOCRadar

Dark Web Sales: Unauthorized Citrix Access, Credit Cards, and Student Documents

The SOCRadar Dark Web Team has been tirelessly monitoring the deep corners of the internet, and their efforts have unearthed several incidents that put various entities at risk.  In this…

Critical Microsoft Power Platform Vulnerability: Proactive Security Methods to Prevent Exploitation SOCRadar

Critical Microsoft Power Platform Vulnerability: Proactive Security Methods to Prevent Exploitation

Microsoft fixed a critical vulnerability in its Power Platform after facing criticism for the delayed response. Tenable reported the vulnerability to Microsoft on March 30, 2023, and an official fix…

Top 10 Ransomware Demands SOCRadar

Threat-Informed Defense (TID): A Threat Intelligence Perspective

Cyberattacks are increasing in frequency worldwide, posing significant challenges for organizations as they strive to protect their cyber assets from persistent and advanced threat actors. While vulnerability assessments, penetration testing…

Threat Actors Employ New Phishing Tactic Using Google AMP SOCRadar

Threat Actors Employ New Phishing Tactic Using Google AMP

Researchers have uncovered a highly effective phishing tactic, which utilizes Google AMP (Accelerated Mobile Pages). Google AMP is an open-source HTML framework designed to create websites optimized for mobile browsers.…

Living Off the Land: The Invisible Cyber Threat Lurking in Your System SOCRadar

Living Off the Land (LOTL): The Invisible Cyber Threat Lurking in Your System

[Update] January 10, 2024: “Countering Living Off the Land (LOTL) Attack Methods with AI and ML” What is LOTL Attack? Living Off the Land (LOTL), also known as lolbins, is…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action