SonicWall SMA Flaws Lead to KNUCKLEBALL Malware
SonicWall SMA Flaws Lead to KNUCKLEBALL Malware SonicWall SMA 1000 appliances were compromised in a zero-day campaign involving custom malware, root-level access, credential gathering, and attempts to...
Who Needs a Job? DPRK ClickFake Interview Campaign Drops PylangGhost a...
Who Needs a Job? DPRK ClickFake Interview Campaign Drops PylangGhost and GolangGhost RATs This article by SOCRadar Threat Research Unit (STRU) analyzes the latest ClickFake Interview campaign, a North...
7-Zip CVE-2026-14266 RCE Risk Explained
7-Zip CVE-2026-14266 RCE Risk Explained CVE-2026-14266 is a heap-based buffer overflow in 7-Zip’s XZ decompression logic. If a user opens or extracts specially crafted compressed content with an affec...
Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks
Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks SOCRadar Dark Web Team identified several new underground posts, including an alleged U.S. fullz sale, administrative access to a ...
WordPress wp2shell Vulnerability (CVE-2026-63030): Quick FAQ for CISOs
WordPress wp2shell Vulnerability (CVE-2026-63030): Quick FAQ for CISOs Updated July 20, 2026: In-the-wild exploitation confirmed. Public proof-of-concept exploits for the full chain are now circulatin...
FIFA World Cup 2026 Fraud Campaigns
FIFA World Cup 2026 Fraud Campaigns Between April and July 2026, the SOCRadar Threat Research Unit (STRU) tracked the fraud ecosystem built around the FIFA World Cup 2026 spanning counterfeit merchand...
Top 10 MSSPs in the UK in 2026
Top 10 MSSPs in the UK in 2026 For the first time, the UK is about to regulate MSSPs themselves. The Cyber Security and Resilience Bill, now before the House of Lords, will turn medium and large manag...
CVE-2026-59208 Enables Cross-Issuer Impersonation in n8n
CVE-2026-59208 Enables Cross-Issuer Impersonation in n8n AI and workflow automation platforms can connect identities directly to actions across email, cloud services, databases, and other business sys...
SOCRadar XTI Is Live on the Chrome Web Store
SOCRadar XTI Is Live on the Chrome Web Store SOCRadar XTI, our official browser extension, is now available on the Chrome Web Store. It puts enrichment, malware analysis, and IOC operationalization di...
July 2026 Patch Tuesday: 622 Vulnerabilities, 3 Zero-Days
July 2026 Patch Tuesday: 622 Vulnerabilities, 3 Zero-Days Microsoft released its July 2026 Patch Tuesday security updates on July 14, 2026, addressing 622 CVEs – one of the largest single releases on ...
SAP Security Patch Day July 2026 Fixes Critical NetWeaver CVE-2026-447...
SAP Security Patch Day July 2026 Fixes Critical NetWeaver CVE-2026-44747 On July 14, 2026, SAP released its monthly security updates, delivering 16 new Security Notes and one GitHub security advisory,...
Top 10 Cybersecurity Movies to Watch
Top 10 Cybersecurity Movies to Watch Cybersecurity work is usually not very cinematic. Most days involve logs, tickets, access reviews, patch windows, alert triage, incident timelines, and careful con...
Dark Web Profile: Krybit Ransomware
Dark Web Profile: Krybit Ransomware Emerging from an increasingly crowded and combative ransomware ecosystem, Krybit Ransomware operates as a financially motivated, opportunistic Ransomware-as-a-Servi...
Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Cl...
Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Claims SOCRadar Dark Web Team identified several new underground posts, including the resurfacing of an alleged legacy Brooks Intern...
How HalluSquatting Could Fuel Agentic Botnets
How HalluSquatting Could Fuel Agentic Botnets AI agents can make software development and automation faster, but they can also introduce a new supply chain risk. HalluSquatting, also known as adversar...
Top 10 MSSPs in Saudi Arabia in 2026
Top 10 MSSPs in Saudi Arabia in 2026 Saudi Arabia’s cybersecurity market is expanding rapidly, with analyst estimates placing it at roughly USD 4 billion in 2025 and heading toward USD 8.9 billion by ...
Top 10 Cyber Threat Exposure Management Platforms
Top 10 Cyber Threat Exposure Management Platforms Cyber Threat Exposure Management (CTEM) has moved from a conceptual framework into a real buying and operating decision. Security teams are trying to ...
MDASH and AI Reshape Windows Patching
MDASH and AI Reshape Windows Patching Microsoft is planning to bring AI deeper into Windows vulnerability management through tools such as MDASH, an internal system designed to identify and validate s...
How WP-SHELLSTORM Exposed 1.4M WordPress Sites
How WP-SHELLSTORM Exposed 1.4M WordPress Sites The SOCRadar Threat Intelligence Team traces an exposed directory back to a Chinese-linked cybercrime operation and details findings from the investigati...
The AI Agent Credential Crisis: From Stealer Log to Source Code
The AI Agent Credential Crisis: From Stealer Log to Source Code AI coding tools now hold credentials that reach into source code repositories, cloud infrastructure, CI/CD pipelines, and connected serv...
