Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Underground Fully UnDetectable (FUD) Crypter Market SOCRadar

Underground Fully UnDetectable (FUD) Crypter Market

The rapidly evolving threats in the field of cybersecurity are being met with sophisticated methods such as “FUD” (Fully UnDetectable) crypters, which are advanced crypter tools used by cybercriminals. This…

Overview of Cloudflare’s 2023 Q2 DDoS Threat Report SOCRadar

Overview of Cloudflare’s 2023 Q2 DDoS Threat Report

Cloudflare, a renowned internet security company, has recently released a comprehensive report concerning DDoS attacks (Distributed Denial-of-Service), elucidating the evolving methodologies employed in these attacks and presenting the latest statistical…

Critical and High Vulnerabilities in Citrix ADC and Citrix Gateway (CVE-2023-3519, CVE-2023-3466, CVE-2023-3467) SOCRadar

Critical and High Vulnerabilities in Citrix ADC and Citrix Gateway (CVE-2023-3519, CVE-2023-3466, CVE-2023-3467)

What are the vulnerabilities in Citrix, when were they released, what are they used for, and why are they so important? Citrix ADC and Citrix Gateway have critical vulnerabilities (CVE-2023-3519,…

Inside the Mind of a Ransomware Boss: An Interview with the LockBit Administrator SOCRadar

Inside the Mind of a Ransomware Boss: An Interview with the LockBit Administrator

As the effectiveness of ransomware attacks continues to escalate, they have emerged as the most significant challenge in today’s digital landscape. Despite ongoing efforts by the Cyber Security community to…

Threat Landscape in the Aviation Industry for H1 of 2023 SOCRadar

Threat Landscape in the Aviation Industry for H1 of 2023

The aviation industry relies on interconnected networks and systems to facilitate seamless operations. Airlines, airports, manufacturers of aircraft, and numerous service providers are just a few of the many stakeholders…

Critical WooCommerce Vulnerability Enables Admin Privileges on WordPress Sites (CVE-2023-28121) SOCRadar

Critical WooCommerce Vulnerability Enables Admin Privileges on WordPress Sites (CVE-2023-28121)

Researchers have observed an active exploit campaign targeting a newly disclosed vulnerability, CVE-2023-28121, in WooCommerce Payments plugin. There are more than 600,000 WordPress websites that use the plugin. Notably, this…

Critical Remote Code Execution Vulnerability in Adobe ColdFusion (CVE-2023-29300) SOCRadar

Critical Remote Code Execution Vulnerability in Adobe ColdFusion (CVE-2023-29300)

[Update] January 9, 2024: “CVE-2023-38203 and CVE-2023-29300 in Adobe ColdFusion Have Joined the CISA KEV Catalog” [Update] September 4, 2023: Fortinet has reported on active exploitation attempts in Adobe ColdFusion.…

From Azure AD to Microsoft Entra ID: Navigating the Name Change and Strengthening Phishing Defense SOCRadar

From Azure AD to Microsoft Entra ID: Navigating the Name Change and Strengthening Phishing Defense

Azure AD, now known as Microsoft Entra ID, is undergoing a name change announced by Microsoft on 11 July, 2023. The motive behind this transition is to reflect Microsoft’s vision…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action