soc

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.   CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. […]

Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain The SOCRadar Threat Research Unit (STRU) has conducted an „inside-out“ analysis of AnonyMousKIT , an AI-powered Phishing-as-a-Service (PhaaS) ecosystem specifically en

Imobiliare.ro, Klark.ai, Fortinet VPN, E-Commerce Skimming, and Solimut SQLi SOCRadar Dark Web Team identified several new underground posts involving alleged database leaks, exposed remote access, and access-for-sale ac

Cisco Crosswork, Secure Workload CVEs Patched Cisco released security updates for Cisco Crosswork and Cisco Secure Workload , addressing nine vulnerabilities across the two product families. The updates include five maxi

CVE-2026-19478: GitLab GraphQL Flaw Exploited GitLab has patched CVE-2026-19478 , a critical code injection vulnerability affecting self-managed Community Edition (CE) and Enterprise Edition (EE) instances. Under certain

ShinyHunters Claims ReliaQuest Breach A ShinyHunters -associated leak site listed ReliaQuest on August 23, 2026, raising questions about a potential data extortion attempt against the cybersecurity provider. No evidence