Latest articles
SOCRadar
NetScaler C2: CVE-2026-88771 Exploitation Operation
NetScaler C2: A Massive CVE-2026-88771 Exploitation Operation On September 27, 2026, Citrix released a security bulletin regarding multiple vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway. One of the
SOCRadar
FortiBleed Is Still Active, Locking Organizations Out
FortiBleed Is Still Active, Locking Organizations Out On October 6, 2026, the FBI and the U.S. Secret Service published a joint Cybersecurity Advisory on FortiBleed, the active global credential compromise…
SOCRadar
SOCRadar Alarms in Elastic | Investigate Threats Faster
Your SOC runs on Elastic. Detections, logs, cases and dashboards all live in Kibana, and your analysts have built their muscle memory around it. Then an impersonating domain, a leaked…
SOCRadar
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure SOCRadar's Threat Research Unit (STRU) has documented CyberXero , a Russian-speaking, financially motivated Initial Access Brok
SOCRadar
CVE-2026-88779: Citrix NetScaler Zero-Day
CVE-2026-88779: Citrix NetScaler Zero-Day Citrix has patched CVE-2026-88779, a high-severity NetScaler vulnerability that was exploited as a zero-day before fixes became available. The memory overflow affects customer-ma
SOCRadar
CVE-2026-90970: GitLab AI Gateway RCE
CVE-2026-90970: GitLab AI Gateway RCE GitLab has patched CVE-2026-90970 , a critical vulnerability in the Self-Hosted AI Gateway that can allow an authenticated user with Duo Agent Platform access to…
SOCRadar
IQUALIF France Leak, IUT Paris Seine Breach, US IAB Auction, SMTP Credential Dump, and Apache Struts Exploit Sale
IQUALIF France Leak, IUT Paris Seine Breach, US IAB Auction, SMTP Credential Dump, and Apache Struts Exploit Sale SOCRadar Dark Web Team identified several new underground posts, including an alleged…
SOCRadar
FortiMail Zero-Day Under Active Exploitation
Fortinet has confirmed that CVE-2026-104286, a critical path traversal flaw in FortiMail, is being exploited in zero-day attacks, and CISA added it to the Known Exploited Vulnerabilities (KEV) catalog on…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action