NetScaler C2: CVE-2026-88771 Exploitation Operation
Oct 07, 2026
Categories
Top Articles
FortiBleed Is Still Active, Locking Organizations Out
Oct 07, 2026
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure
Oct 06, 2026
SOCRadar Attack Surface Management Now Integrates with ArmorCode ASPM
Sep 29, 2026
Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline
Sep 24, 2026
Oct 07, 2026
NetScaler C2: CVE-2026-88771 Exploitation Operation
NetScaler C2: CVE-2026-88771 Exploitation Operation On September 27, 2026, Citrix released a security bulletin regarding multiple vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway. ...
Learn More
Oct 07, 2026
FortiBleed Is Still Active, Locking Organizations Out
FortiBleed Is Still Active, Locking Organizations Out On October 6, 2026, the FBI and the U.S. Secret Service published a joint Cybersecurity Advisory on FortiBleed, the active global credential compr...
Learn More
Oct 06, 2026
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian C...
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure SOCRadar’s Threat Research Unit (STRU) has documented CyberXero, a Russian-speaking, financially motivated ...
Learn More
Sep 29, 2026
SOCRadar Attack Surface Management Now Integrates with ArmorCode ASPM
SOCRadar Attack Surface Management Now Integrates with ArmorCode ASPM Your team has a process for triaging vulnerabilities. The question is whether findings from your external attack surface ever reac...
Learn More
Sep 24, 2026
Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetiza...
Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline SOCRadar Threat Research Unit (STRU) has uncovered an end-to-end cybercrime operation dubbed Operation Master, in wh...
Learn More
Sep 24, 2026
Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with...
Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar Your analysts start the morning in their threat intelligence platform, working the feeds, cases, and detections in front...
Learn More
Sep 22, 2026
Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lu...
Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures Since 2009, the Democratic People’s Republic of Korea (DPRK) has fully integrated cyber operations into its national strategy,...
Learn More
Sep 17, 2026
Manage SOCRadar Alerts Where Your Team Already Works with SOCRadar and...
Manage SOCRadar Alerts Where Your Team Already Works with SOCRadar and Zendesk A new high-severity alert lands in your threat intelligence platform. Someone notices it eventually, copies the details i...
Learn More
Sep 16, 2026
Discernment Deleted: Inside the Operation Server of BlackHatSect0r && ...
Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX A French-speaking crew deleted the line reading “discernment retained” from its AI agent’s memory, wrote “I am a w...
Learn More
Sep 15, 2026
Agentic Ransomware: From Human-Operated to AI-Operated Attacks
Agentic Ransomware: From Human-Operated to AI-Operated Attacks Ransomware has always needed a human involved somewhere: an affiliate navigating a network by hand, or at minimum, a person who wrote the...
Learn More
Sep 15, 2026
Simplify Threat Intelligence Procurement with SOCRadar and Microsoft M...
Simplify Threat Intelligence Procurement with SOCRadar and Microsoft Marketplace Your security team has already made the case for external threat intelligence. The budget owner agrees. Then the deal s...
Learn More
Sep 14, 2026
VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch
VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch SOCRadar’s Threat Research Unit (STRU) has documented VectraRAT, a Malware-as-a-Service platform built entirely from scratch rather than f...
Learn More
Sep 11, 2026
Simplify Threat Intelligence Procurement with SOCRadar and AWS Marketp...
Simplify Threat Intelligence Procurement with SOCRadar and AWS Marketplace Your security team has already made the case for external threat intelligence. The budget owner agrees. Then the deal stalls ...
Learn More
Sep 11, 2026
Vibe-Terrorism: Inside the Yemen Cell That Used Claude to Build Guided...
Vibe-Terrorism: Inside the Yemen Cell That Used Claude to Build Guided Weapons In Anthropic’s September 2026 threat intelligence report, one case stands apart from the rest. A small cell based in nort...
Learn More
Sep 08, 2026
CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploit...
CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT One of the most common entry points for attackers is the exploitation of public-facing edge devices (such as VPNs, route...
Learn More
Sep 07, 2026
Bring Licensed Threat Intelligence into Every Conversation with SOCRad...
Bring Licensed Threat Intelligence into Every Conversation with SOCRadar and ChatGPT The SOCRadar Threat Intelligence MCP app connects ChatGPT to the SOCRadar MCP server over OAuth, exposing your lice...
Learn More
Sep 04, 2026
PEEP: A Browser RAT Posing as a Chrome Extension
PEEP: A Browser RAT Posing as a Chrome Extension The Threat Research Unit (STRU) at SOCRadar’s Extended Threat Intelligence (XTI) platform identified and analyzed PEEP, a Chromium-based emerging post-...
Learn More
Aug 24, 2026
ShinyHunters Claims ReliaQuest Breach
ShinyHunters Claims ReliaQuest Breach [Update] August 25, 2026: ReliaQuest Confirms Social Engineering Incident, Disputes Broader Breach Claim A ShinyHunters-associated leak site listed ReliaQuest on ...
Learn More
Aug 21, 2026
SOCRadar Ranks No. 542 on the 2026 Inc. 5000 List of America's Fastest...
SOCRadar Ranks No. 542 on the 2026 Inc. 5000 List of America’s Fastest-Growing Private Companies SOCRadar Is Recognized for 645% Three-Year Revenue Growth, Marking Its Second Consecutive Year on the L...
Learn More
Aug 17, 2026
Italy RDWeb Access, GBCSA Data Sale, SCHUFA Claim, and FLY Firebase Ex...
Italy RDWeb Access, GBCSA Data Sale, SCHUFA Claim, and FLY Firebase Exposure SOCRadar Dark Web Team identified several new underground posts involving alleged initial access sales and large-scale data...
Learn More
