2026 buyer's guide ranks 12 cyber threat intelligence feeds
The unpaid comparison maps each provider to the question it answers best and flags Kaspersky for US and allied procurement bans.
22
Vendor
SOCRadar
- Mentions · 7d2
- Mentions · 30d7
- All mentions32
- First seenAug 25, 2026
- Last mentioned1d ago
Timeline
32 articles · newest first2026 guide compares 12 threat intelligence platforms
The unpaid review judges platforms on operationalization and flags Mastercard and Securonix ownership as RFP questions.
20
SOCRadar promotes a buyer's checklist for AI pentesting tools
The captured page is site navigation and product marketing; the 30 questions themselves are not included.
12
SOCRadar Splunk Integration: New MSSP and Vulnerability Apps
SOCRadar released Splunk apps for MSSP incidents and vulnerability management, expanding its Splunkbase catalog to five apps.
20
Turn External Threat Intelligence into Machine-Speed Response with SOCRadar and Torq
SOCRadar and Torq announced an integration to automate response to external threat intelligence alerts.
18
SOCRadar Freshdesk Integration: Track and Resolve Security Incidents as Tickets
SOCRadar added a Freshdesk integration so teams can track security findings as support tickets.
16
SOCRadar Alarms in Elastic | Investigate Threats Faster
SOCRadar says analysts can investigate its alarms inside Elastic and Kibana instead of a separate console.
14
SOCRadar Attack Surface Management Now Integrates with ArmorCode ASPM
SOCRadar Attack Surface Management now sends external findings into ArmorCode's ASPM workflow.
18
Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar
SOCRadar describes feeding dark-web intelligence into EclecticIQ Intelligence Center to close a visibility gap.
14
AI Agents Now Run Ransomware Attacks End-to-End Without Human Operators
SOCRadar documented JADEPUFFER, an AI agent that autonomously executed a ransomware campaign from Langflow exploit through encryption and extortion.
80
BlackHatSect0r Uses DeepSeek-Powered AI Agent to Automate Attacks and Harvest 16,834 Credentials
SOCRadar linked the BlackHatSect0r crew to a DeepSeek-powered AI agent that automated scanning and harvested 16,834 credentials from exposed systems.
63
Manage SOCRadar Alerts Where Your Team Already Works with SOCRadar and Zendesk
SOCRadar announced a Zendesk integration that lets security teams manage high-severity threat-intelligence alerts as tickets inside Zendesk.
12
Hackers Can Rent VectraRAT for $250 a Month to Take Control of Windows PCs
SOCRadar uncovered VectraRAT, a previously undocumented $250-per-month Windows RAT rental service delivered via Amadey and ClickFix lures.
58
Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX
SOCRadar analyzes the operation server of French-speaking crew BlackHatSect0r && DXQRTXX, revealing operators rewrote their AI agent's memory to read 'I am a weapon'.
48
Agentic Ransomware: From Human-Operated to AI-Operated Attacks
SOCRadar analyzes the shift from human-operated ransomware to agentic AI-driven attacks and what this transition means for defenders.
45
Simplify Threat Intelligence Procurement with SOCRadar and Microsoft Marketplace
SOCRadar announces its threat intelligence platform is available via Microsoft Marketplace to simplify procurement for security teams.
15
VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch
SOCRadar's Threat Research Unit documents VectraRAT, a previously unreported full-stack Malware-as-a-Service platform built entirely from scratch.
55
UCQ Leak, Israeli GlobalProtect Access, Digital Nirvana Dump, 32baar, and Ghorer Bazar
SOCRadar flags underground posts selling an alleged Universidad Cuauhtémoc database, Israeli GlobalProtect VPN access, and Digital Nirvana data dumps.
25
Simplify Threat Intelligence Procurement with SOCRadar and AWS Marketplace
SOCRadar now offers its threat intelligence platform through AWS Marketplace to streamline security teams' procurement process.
15
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
CISA adds actively exploited Cisco, Citrix, and Fortinet edge-device flaws to KEV catalog, ordering federal agencies to patch by September 12, 2026.
85
Dark Web Market: Anubis Market
SOCRadar profiles Anubis Market, a Tor hidden-service dark web marketplace with escrow-backed trading in Bitcoin and Monero.
10
CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT
Attackers exploiting CVE-2025-25249 in Fortinet FortiGate firewalls deploy PivotC2, a post-exploitation RAT, on exposed edge devices.
74
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
SOCRadar disclosed PEEP, a post-exploitation Chromium extension toolkit that turns Chrome and Edge into host-level backdoors via native messaging and C2 polling.
72
FBI Investigates Nexus Claim of 153M+ Driver’s License Records
FBI is investigating dark web service Nexus's claim to sell access to over 153 million US and Canadian driver's license records.
78
Bring Licensed Threat Intelligence into Every Conversation with SOCRadar and ChatGPT
SOCRadar launched a Threat Intelligence MCP app connecting ChatGPT to its licensed threat intelligence via OAuth-authenticated MCP server.
22
E-Commerce Access, Vedicline Data, Langflow RCE, ASUS Claim, and Energy Shell Access
SOCRadar reports underground posts claiming a Bangladeshi e-commerce database, Vedicline data leak, Langflow RCE, ASUS breach, and energy-sector shell access.
30
PEEP: A Browser RAT Posing as a Chrome Extension
SOCRadar's STRU analyzed PEEP, an emerging Chromium-based RAT disguised as a Chrome extension enabling post-exploitation control of browsers.
45
Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited
Help Net Security's weekly digest highlights 274 compromised Zimbra servers, Gitea and Citrix NetScaler KEV additions, a PaperCut zero-day, and a suspected Iran-linked power plant attack.
25
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
SOCRadar details AnonyMousKIT, a phishing-as-a-service platform using AI voice agents posing as Apple Support to steal passcodes and 2FA codes.
58
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
CISA added actively exploited Oracle WebLogic flaw CVE-2026-21962 (CVSS 10.0) to its KEV catalog, letting unauthenticated attackers access or modify critical data.
85
AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes
SOCRadar details AnonyMousKIT, an active phishing-as-a-service platform using AI voice agents across 506 domains to steal Apple ID credentials from stolen iPhone owners.
55
E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands
Researchers identified two new RATs, E4del and PINHOLE, using FTP banners as dead drop resolvers to fetch C2 commands via ClickFix-style lures.
55
Related CVEs
by mentions- CVE-2025-252494%9.8Heap-Based Buffer Overflow in Fortinet FortiOS, FortiSwitchManager, and FortiSASE
- CVE-2026-2196273%10.0Unauthenticated Access Control Bypass in Oracle HTTP Server and WebLogic Proxy Plug-in
- CVE-2026-2485887%9.8FortiCloud SSO Authentication Bypass Across Multiple Fortinet Products
- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2020-14882100%9.8Remote Code Execution in Oracle WebLogic Server
- CVE-2026-6000424%9.8Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
- CVE-2026-1949033%9.3Remote Authentication Bypass in Citrix NetScaler ADC and NetScaler Gateway
- CVE-2026-7357072%8.9Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
- CVE-2017-10271100%7.5Unauthenticated Remote Code Execution in Oracle WebLogic Server
- CVE-2020-1488398%7.2High-Privilege Console Flaw in Oracle WebLogic Server Enables Full Takeover
Appears with
- SOCRadarorganization · 9
- Googlevendor · 3
- AnonyMousKITthreat actor · 2
- VectraRATmalware · 2
- Fortinetvendor · 2
- NetScaler Gatewayproduct · 2
- Palo Alto Networksvendor · 2
- FBIorganization · 2
- BlackHatSect0rthreat actor · 2
- Mandiantproduct · 2
- Recorded Futurevendor · 2
- NetScaler ADCproduct · 2
- Kasperskyvendor · 2
- PivotC2malware · 2
- Mastercardorganization · 2
- Microsoftvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.