Latest articles
SOCRadar
MCP Servers in Threat Intelligence: 10 Use Cases for CISOs
The security operations center is no stranger to data overload. CISOs and their teams must parse endless alerts, indicators, and logs, all while maintaining visibility across an expanding attack surface.…
SOCRadar
Red Hat Breach: Crimson Collective Claims Massive Theft of Private Repositories
[Update] October 14, 2025: Crimson Collective Advertises Stolen Red Hat Data for Sale [Update] October 7, 2025: Crimson Collective Aligns with ShinyHunters and Scattered Lapsus$ Hunters in New Extortion…
SOCRadar
14 Real-World Threat Intelligence Use Cases for the Aviation Industry
The aviation industry operates at the intersection of critical infrastructure, global commerce, and national security – making it an irresistible target for cyber adversaries. From grounded fleets due to ransomware…
SOCRadar
Top 10 MCP Server Attacks & Mitigations
As AI systems become more powerful and integrated into business workflows, securing the tools they use has become critical. AI agents can interact with databases, APIs, and external systems, creating…
SOCRadar
CVE-2025-32463: Sudo Privilege Escalation Vulnerability Exploited, CISA Warns
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that attackers are actively exploiting CVE-2025-32463, a severe flaw in the widely used sudo utility on Linux and other Unix-like…
SOCRadar
VMware CVE-2025-41244 Exploited: What You Need to Know About the Latest Flaws
[Update] VMware Aria Operations & Tools Vulnerability (CVE-2025-41244) Added to CISA KEV Cybersecurity researchers have reported active exploitation of a severe VMware vulnerability, CVE-2025-41244, that allows attackers to gain root-level…
SOCRadar
Android RCE, CRM Breach, Axiom Crypto Drainer, and Airbus Panel Interest
SOCRadar Dark Web Team has uncovered multiple high-impact listings in underground forums, indicating continued targeting of software platforms and critical industries. Among the posts, a threat actor claims to sell…
SOCRadar
Cisco ASA, FTD Devices Under Active Attack via Zero-Days CVE-2025-20333 & CVE-2025-20362
A newly disclosed wave of zero-day attacks is targeting Cisco firewall products, raising urgent concerns for network security teams. With CVE-2025-20333 and CVE-2025-20362 actively exploited to gain root-level access, implant…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action