Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

An Inherent Weakness: Critical Infrastructures in Gulf Countries SOCRadar

An Inherent Weakness: Critical Infrastructures in Gulf Countries

One of the most devastating cyberattacks on critical infrastructure was the  Colonial Pipeline attack  in the United States in May 2021. This attack caused chaos nationwide and was considered a …

Active Exploitation of Serious Vulnerabilities in PaperCut, Veeam, and TP-Link SOCRadar

Active Exploitation of Serious Vulnerabilities in PaperCut, Veeam, and TP-Link

[Update] July 11, 2024: “EstateRansomware Exploits CVE-2023-27532 in Veeam Systems”  [Update] April 18, 2024: “Indicators of Compromise Related to the Exploitation of CVE-2023-1389” [Update] April 18, 2024: “Multiple Botnet Operations…

Dark Web Profile: LockBit Ransomware SOCRadar

Dark Web Profile: LockBit Ransomware

LockBit is a long-running Ransomware-as-a-Service (RaaS) operation that has survived repeated malware upgrades, affiliate turnover, infrastructure exposure, and major law-enforcement disruption. First observed in 2019, the ransomware has evolved through…

Apache Superset Default Configuration Vulnerability Could Lead to RCE SOCRadar

Apache Superset Default Configuration Vulnerability Could Lead to RCE

[Update] January 9, 2024: “CISA Added Apache Superset Vulnerability (CVE-2023-27524) to the Known Exploited Vulnerabilities (KEV) Catalog”  Developers of Apache Superset , an open-source data visualization software, have released patches…

AI vs. AI: Future of the Cybersecurity Battles SOCRadar

AI vs. AI: Future of the Cybersecurity Battles

Attacks and security solutions tailored with the help of artificial intelligence (AI) have become a trending subject in the security industry as AI bots continue to improve. The power of…

Severe SLP Vulnerability Could Lead to Large DDoS Amplification Attacks SOCRadar

Severe SLP Vulnerability Could Lead to Large DDoS Amplification Attacks

A new high-severity vulnerability was discovered, affecting  Service Location Protocol (SLP) . The vulnerability could allow attackers to launch massive volumetric  denial-of-service (DoS)  attacks, which could be amplified up to…

PyPI Packages Found Distributing Payloads in WhiteSnake Malware Campaign SOCRadar

PyPI Packages Found Distributing Payloads in WhiteSnake Malware Campaign

Security researchers recently uncovered a new malware payload in the  PyPI repository  for Python packages. The payload, written in C#, raised concerns about the possibility of cross-language malware attacks. Security…

AWS S3 Bucket Takeover Vulnerability: Risks, Consequences, and Detection SOCRadar

AWS S3 Bucket Takeover Vulnerability: Risks, Consequences, and Detection

As the amount of data companies possesses grow, their costs can be optimized more efficiently. Thanks to the emergence of storage technologies, such as AWS S3, that meet business and…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action