soc

April 2026 Patch Tuesday: 165 Vulnerabilities, Two Zero-Days Including One Actively Exploited Microsoft released its April 2026 Patch Tuesday security updates, resolving a total of 165 vulnerabilities across Windows and multiple Microsoft products and components. This month’s release includes two zero-day vulnerabilities: one actively exploited in the wild, and one publicly disclosed before today’s patch […]

AI Across the Attack Chain From Recon to Execution Artificial intelligence has moved from a supporting tool to an active component in cyber operations. Earlier use cases were limited to analysis and content generation. Today, AI is involved across the attack chain, from reconnaissance to execution. This shift has also reduced the level of expertise […]

Top 10 Free Threat Intelligence Tools for MSSPs Threat intelligence helps Managed Security Service Providers (MSSPs) move faster, prioritize better, and give clients clearer answers when new risks appear. Without reliable visibility into indicators of compromise, active threats, adversary behavior, and exposed assets, even a strong SOC can lose valuable time during triage and response. […]

Deep Web vs Dark Web: What’s the Difference? The deep web includes private parts of the internet that are not indexed by search engines and usually require standard browser access with credentials. The Dark Web is a much smaller hidden section of the internet that requires tools like the Tor browser and is more closely […]

CVE-2026-34486: Apache Tomcat Tribes Regression Creates Unauthenticated RCE Path Apache Tomcat users running Tribes clustering should pay attention to CVE-2026-34486, an important-severity regression that can turn an exposed cluster receiver into an unauthenticated remote code execution (RCE) opportunity. The flaw was introduced by a prior security fix for CVE-2026-29146, where a small control-flow change caused […]

Claude Code & ChatGPT Used to Steal Millions of Records in Mexican Government Breach A cyberattack spanning nine Mexican government organizations has become one of the clearest examples yet of how commercial AI can accelerate a cyberattack. In this case, Claude Code and ChatGPT helped speed up exploitation, automate reconnaissance, support privilege escalation, and increase […]

Alleged Police Tipline Data Sale, iOS and Adobe Exploits, RDWeb Access Listings, and Gunra Recruitment SOCRadar’s Dark Web Team identified several new underground posts this week, including an alleged sale of U.S. and Canada tipline database records, claims of high-end exploitation tooling for iOS and Adobe Reader, and multiple RDWeb access listings marketed with elevated […]

CVE-2026-34621: Adobe Acrobat Reader Zero-Day Enables Arbitrary Code Execution via Crafted PDF Adobe released an emergency update for Adobe Acrobat and Adobe Acrobat Reader on Windows and macOS to address CVE-2026-34621, a vulnerability that can lead to arbitrary code execution when a victim opens a crafted PDF. Adobe also confirmed it is exploited in the […]

Could XChat Become a Telegram Rival and a Future Hub for Threat Actors? X’s upcoming messaging app, XChat, is being presented as more than a simple upgrade to direct messages. Public details point to a standalone messaging product with end-to-end encryption, disappearing messages, voice and video calls, file sharing, screenshot blocking, message recall, and use […]

How Phishing Kits Targeting U.S. Giants Are Built, Sold, and Deployed Modern phishing kits can steal authenticated sessions from Microsoft 365 and Google accounts in real time, even when MFA is enabled, and access to those kits can cost as little as $120 for ten days. That low barrier to entry shows how far the […]