soc

BeyondTrust Fixes RS/PRA CVE-2026-40138 and More BeyondTrust has published security advisory BT26-03 for four vulnerabilities in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) appliances. The flaws in

Alleged WordPress 0-Day, HMG Patient Data, Astra Files, OnlineSkills Leak, and RDWeb Access SOCRadar Dark Web Team identified several new underground posts, including an alleged WordPress plugin zero-day privilege escalation exploit, a claimed 452,578-record patient database tied to Dr. Sulaiman Al Habib Medical Group, and alleged defense-related data from India’s Astra missile program. Other posts […]

What to Expect From the 2026 NATO Summit in Turkiye NATO leaders meet in Ankara, Turkiye on July 7–8 for what Secretary General Mark Rutte has called “ maybe even more important than The Hague .“ The Hague summit last ye

June 2026: FortiBleed Cracks Fortinet Firewalls, Supply Chain Worms Hit npm and PyPI June 2026 was headlined by FortiBleed, a Russian-attributed credential harvesting campaign that exposed over 86,000 Fortinet firewalls

CISA Flags SharePoint RCE (CVE-2026-45659) for Active Exploitation CISA has added CVE-2026-45659 to its Known Exploited Vulnerabilities (KEV) catalog as of July 1, 2026, indicating active exploitation. The vulnerability

CVE-2026-8037: Progress Kemp LoadMaster RCE Exploited in the Wild A critical vulnerability tracked as CVE-2026-8037 affects Progress Kemp LoadMaster (Progress ADC / LoadMaster). The issue is a pre-auth Remote Code Execut

SOCRadar Links FortiBleed Campaign to INC and Lynx Ransomware Operations SOCRadar’s Threat Research Unit (STRU) has linked the FortiBleed credential-harvesting campaign to two active ransomware-as-a-service operations,

Adobe ColdFusion and Campaign Classic: Critical RCE Flaws Among Multiple CVSS 10.0 Issues Adobe has published two “Priority 1” security bulletins, covering a total of 12 vulnerabilities in Adobe ColdFusion and Adobe Camp

2026 SANS CTI Survey Report: Key Findings on CTI’s Influence Gap Cyber threat intelligence (CTI) has arrived. It’s embedded in security programs, staffed by dedicated teams, supported by AI, and recognized at the executi

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing […]