soc

CVE-2026-Adresse geschuetztCross-Issuer Impersonation in n8n AI and workflow automation platforms can connect identities directly to actions across email, cloud services, databases, and other business systems. When authentic

F5 has disclosed multiple NGINX Vulnerabilities in an out-of-band security update, with CVE-2026-42533 standing out as one of the most dangerous issues in the batch. The flaw is a heap buffer overflow in NGINX’s handling of the map directive when regular expression matching references regex variables in a specific order. In vulnerable deployments, a remote […]

Microsoft’s July 2026 Patch Tuesday drew immediate attention not just because of its record scale, but because two actively exploited zero-days hit some of the most sensitive parts of enterprise infrastructure. CVE-2026-56164 targets on-premises SharePoint Server and is remotely exploitable in low-complexity attacks, while CVE-2026-56155 targets Active Directory Federation Services and allows privilege escalation from […]

SonicWall has patched two actively exploited zero-days affecting SMA 1000 Series secure remote access appliances. The issues are CVE-2026-15409, a critical unauthenticated SSRF flaw in the Workplace interface, and CVE-2026-15410, a post-authentication code injection flaw in the Appliance Management Console that can lead to arbitrary OS command execution as administrator under certain conditions. Public reporting […]

SOCRadar XTI Is Live on the Chrome Web Store SOCRadar XTI, our official browser extension, is now available on the Chrome Web Store . It puts enrichment, malware analysis, and IOC operationalization directly in the brows

July 2026 Patch Tuesday: 622 Vulnerabilities, 3 Zero-Days Microsoft released its July 2026 Patch Tuesday security updates on July 14, 2026, addressing 622 CVEs – one of the largest single releases on record, helped along

SAP Security Patch Day July 2026 Fixes Critical NetWeaver CVE-2026-Adresse geschuetztJuly 14, 2026, SAP released its monthly security updates, delivering 16 new Security Notes and one GitHub security advisory , alongside three up

Top 10 Cybersecurity Movies to Watch Cybersecurity work is usually not very cinematic. Most days involve logs, tickets, access reviews, patch windows, alert triage, incident timelines, and careful conversations about ris

Dark Web Profile: Krybit Ransomware Emerging from an increasingly crowded and combative ransomware ecosystem, Krybit Ransomware operates as a financially motivated, opportunistic Ransomware-as-a-Service (RaaS) threat. Wi

Alleged Brooks, Keepcool, Truecaller Bot, DAMAC, and US Resume Data Claims SOCRadar Dark Web Team identified several new underground posts, including the resurfacing of an alleged legacy Brooks International database, a