soc

CVE-2026-8451 Adds a New NetScaler Memory Overread to the CitrixBleed Pattern Citrix has patched CVE-2026-8451, a vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The issue is an insufficient input val

CVE-2026-48558: SimpleHelp OIDC Auth Bypass Used to Deploy Infostealer Payloads CVE-2026-48558 is a critical authentication bypass affecting SimpleHelp, a remote support and RMM (remote monitoring and management) platfor

Oracle EBS Flaw CVE-2026-Adresse geschuetztOracle Payments to Takeover CVE-2026-46817 is a critical vulnerability in Oracle E-Business Suite (EBS) Oracle Payments, specifically in the File Transmission component. Oracle rat

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48558 SimpleHelp Authentication Bypass Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on […]

Alleged Okta Leak, MTS Bank Data Sale, Naucalpan, SSH Access, and Flawireless Claims SOCRadar Dark Web Team identified several new underground posts involving alleged database leaks and access sales. The activity includes an alleged SQL database leak tied to Naucalpan de Juarez services in Mexico, an alleged 3.29 million-record Okta dataset, and an alleged 1 […]

Top 10 MSSPs in Brazil in 2026 Brazil’s cybersecurity market is growing fast, from an estimated USD 3.68 billion in 2025 toward USD 6.57 billion by 2031, driven by surging cyber threats, rapid digital transformation, and the enforcement of the Lei Geral de Proteção de Dados (LGPD). For organizations operating in Brazil, selecting a Managed […]

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.   CVE-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks […]

What Is Attack Surface Management (ASM)? Attack Surface Management (ASM) is the continuous discovery, monitoring, and prioritization of an organization’s exposed digital assets, including cloud infrastructure, SaaS applications, internet-facing systems, identities, and third-party integrations. The goal is to identify and reduce vulnerabilities before attackers can exploit them. Modern environments change faster than traditional security processes […]

Klue Breach: What You Need to Know The Klue breach shows how stolen OAuth tokens from a trusted SaaS integration can expose Salesforce CRM data. Learn what happened, which companies confirmed impact, what data was exposed, and how defenders should respond. What Happened in the Klue Breach? The Klue breach was a third-party Software-as-a-Service (SaaS) […]

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.   CVE-2025-67038 Lantronix EDS5000 Code Injection Vulnerability CVE-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability CVE-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability CVE-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability These types of vulnerabilities are frequent […]