Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Zyxel Firewall Flaws Exploited: Urgent Action Required SOCRadar

Zyxel Firewall Flaws Exploited: Urgent Action Required

[Update] July 24, 2023: Threat actors are targeting several Zyxel devices with CVE-2023-28771. Fortinet has detected a significant rise in botnet attacks associated with this vulnerability. Added the subheading: “Increase…

Dark Web Profile: Play Ransomware SOCRadar

Dark Web Profile: Play Ransomware

[Update] July 22, 2024: “Play Ransomware Broadens Its Scope with New Linux Variant Targeting ESXi” [Update] December 19, 2023: “Collaborative Advisory on Play Ransomware: 300 Entities Affected by October 2023.”…

Gigabyte Firmware Code Injection: Persistent Backdoor Leads to Supply Chain Risks SOCRadar

Gigabyte Firmware Code Injection: Persistent Backdoor Leads to Supply Chain Risks

Researchers have expressed concerns about the  UEFI firmware  found in numerous motherboards by  Gigabyte , a PC hardware manufacturer. They discovered that the firmware injects executable code into the Windows…

RaidForums Leak, Breached IT Services, and New LockBit Victim SOCRadar

RaidForums Leak, Breached IT Services, and New LockBit Victim

Step into the shadowy world of the dark web as we explore this week’s gripping headlines. From the leaked RaidForum database to unauthorized access sales and the sale of Spanish…

How Can Strategic CTI Help CISOs Fulfil Their Task? SOCRadar

How Can Strategic CTI Help CISOs Fulfil Their Task?

Cyber threats have an emerging adversarial impact on organizations such as enterprises and governments. In parallel with increasing cyberattacks and  data breaches , although deployed cybersecurity tools and software have…

Attackers Exploit Critical Zero-Day Vulnerability in MOVEit Transfer SOCRadar

Attackers Exploit Critical Zero-Day Vulnerability in MOVEit Transfer

[Update] July 18, 2023: A notorious cybercrime group’s MOVEit attack has affected 340 organizations and over 18 million individuals. Added the subheading: “MOVEit Attack Impacts 340 Organizations, 18 Million Individuals.”…

Beyond the Veil of Surveillance: Private Sector Offensive Actors (PSOAs) SOCRadar

Beyond the Veil of Surveillance: Private Sector Offensive Actors (PSOAs)

Privacy and surveillance are two sides of a coin, and the conditions that have blurred the boundaries between them have also paved the way for the thriving of cyber commercial…

CVE-2023-33733 Vulnerability in ReportLab Allows Bypassing Sandbox Restrictions SOCRadar

CVE-2023-33733 Vulnerability in ReportLab Allows Bypassing Sandbox Restrictions

A proof-of-concept (PoC) exploit and a technical write-up for a  ReportLab  vulnerability are now available. The vulnerability tracked as  CVE-2023-33733  could allow an attacker to perform  remote code execution  (RCE).…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action