PHP2Shell: 2 x CVSS 9.2 flaws in PHP may allow RCE! Read Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Operation Talked: A Russia-Linked Cyber Espionage Campaign Targeting Ukraine's Defense Industry SOCRadar

Operation Talked: A Russia-Linked Cyber Espionage Campaign Targeting Ukraine’s Defense Industry

Operation Talked: A Russia-Linked Cyber Espionage Campaign Targeting Ukraine's Defense Industry TL;DR: OPERATION TALKED is an ongoing Russia-linked espionage campaign, exposed after the actor left their own C2 as an…

Threat Actor Profile: Blue Locker Ransomware SOCRadar

Dark Web Profile: Blue Locker Ransomware

Threat Actor Profile: Blue Locker Ransomware Blue Locker Ransomware, first detected in late 2021, the group stayed low-profile for years before making global headlines in August 2025 with a targeted…

Roundcube SQLi (CVE-2026-48842) Exploited SOCRadar

Roundcube SQLi (CVE-2026-48842) Exploited

Roundcube SQLi (CVE-2026-48842) Exploited A pre-authentication SQL injection vulnerability in Roundcube Webmail is reportedly being exploited in the wild months after patches became available. Tracked as CVE-2026-48842 ,

Check Point Pre-Auth Flaws Under Attack SOCRadar

Check Point Pre-Auth Flaws Under Attack

Check Point Pre-Auth Flaws Under Attack Check Point has warned that two critical, pre-authentication vulnerabilities affecting its security products are being actively exploited. CVE-2026-85102 affects VPN certificate ha

Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline SOCRadar

Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline

Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline SOCRadar Threat Research Unit (STRU) has uncovered an end-to-end cybercrime operation dubbed Operation Master, in which a threat actor c

Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar SOCRadar

Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar

Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar Your analysts start the morning in their threat intelligence platform, working the feeds, cases, and detections in front…

CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation SOCRadar

CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation

CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation F5 has released emergency engineering hotfixes for CVE-2026-94127 , a critical heap-based buffer overflow in BIG-IP Access Policy Manager (APM). The vulnerabili

ShinyHunters Claims Access to FBI Systems SOCRadar

ShinyHunters Claims Access to FBI Systems

ShinyHunters Claims Access to FBI Systems Days after hijacking Clop's Dark Web leak site, ShinyHunters claims it breached the FBI, defaced part of its recruitment website, and stole sensitive information…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action