Install
SOC Prime builds collective cyber defense by fusing Detection as Code, Sigma, and MITRE ATT&CK® to help teams proactively defend against emerging threats.
- 25articles · 30d
- 2+ day agolatest article
- Aug 19, 2026earliest in window
- 88%with images
- 253avg words
- Science & Technology 21
- Software 18
- Computers & Electronics 16
- Business & Industrial 5
- Conflict, War & Peace 4
- Crime & Law 4
- Internet & Telecom 4
- Software Dev. 2
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Mirage Kitten Deploys NodeRabbit and PollCat
3+ day, 9+ hour ago (115+ words) SOC Prime Bias: Critical Rationale: This section details the precise execution of the adversary technique (TTP) designed to trigger the detection rule. The commands and narrative MUST directly reflect the TTPs identified and aim to generate the exact telemetry expected…...
CVE-2026-63520 SharePoint RCE Vulnerability Explained
1+ week, 6+ day ago (250+ words) SOC Prime Bias: Critical A critical remote code execution vulnerability affects the Microsoft SharePoint Business Data Connectivity (BDC) subsystem. Attackers can abuse unrestricted.NET type instantiation within the DbTypeReflector class to execute arbitrary operating system commands. When combined with an…...
BlueDelta Deploys HOOKEDGE Against Diplomatic Targets
1+ week, 6+ day ago (166+ words) SOC Prime Bias: High Organizations should disable macros in documents originating from the internet and enforce policies that block unsigned VBA macros. Security teams should monitor for scheduled task abuse and unusual Microsoft Edge execution, including headless mode. Inspecting outbound…...
UAT-10147 Uses Agentic AI for Post-Compromise Attacks
2+ week, 3+ day ago (268+ words) SOC Prime Bias: High UAT-10147 is a Chinese-speaking cybercrime group using agentic AI to automate and scale post-compromise operations. The actor targets Windows and Linux web servers for SEO fraud and data theft. Its AI-driven tooling supports exploit refinement, reconnaissance,…...
Agent Tesla BEC Attack Delivers In-Memory Infostealer
2+ week, 4+ day ago (323+ words) SOC Prime Bias: High A Business Email Compromise (BEC) campaign is using a sophisticated JScript dropper to distribute Agent Tesla v4 malware. The attack relies on Unicode emoji obfuscation to evade signature-based detection and uses DonutLoader to execute a reflective payload…...
proc-macro1 Supply Chain Attack Hits Rust Crates
2+ week, 4+ day ago (115+ words) SOC Prime Bias: Critical Rationale: This section details the precise execution of the adversary technique (TTP) designed to trigger the detection rule. The commands and narrative MUST directly reflect the TTPs identified and aim to generate the exact telemetry expected…...
SoftEther VPN Malware Targets Korean Web Servers
3+ week, 2+ day ago (274+ words) SOC Prime Bias: High The Larva-26010 threat actor is targeting web and MS-SQL servers in South Korea to deploy SoftEther VPN. Compromised systems are repurposed as VPN servers, potentially using cascade connections to conceal the attackers’ true C&C infrastructure....