Articles by Amir Owda
SOCRadar
CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation
CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation F5 has released emergency engineering hotfixes for CVE-2026-94127 , a critical heap-based buffer overflow in BIG-IP Access Policy Manager (APM). The vulnerabili
SOCRadar
FBI Investigates Nexus Claim of 153M+ Driver’s License Records
FBI Investigates Nexus Claim of 153M+ Driver’s License Records A Dark Web service called Nexus has claimed to offer access to more than 153 million driver’s license records from the…
SOCRadar
N-able N-central HF4 Fixes Critical RCE After Series of Authentication Flaws
N-able N-central HF4 Fixes Critical RCE After Series of Authentication Flaws N-able has released N-central 2026.3 Hotfix 4 (build 2026.3.1.14) to fix CVE-2026-86218, a critical pre-authentication remote code execution vu
SOCRadar
Langflow and Rails Exploitation Raises Credential Risks
Langflow and Rails Exploitation Raises Credential Risks Attackers are exploiting two separate critical vulnerabilities affecting Langflow and Ruby on Rails. CVE-2026-0768 allows unauthenticated attackers to execute Pytho
SOCRadar
Anthropic Links Claude Session Theft to Infostealer Malware
Anthropic Links Claude Session Theft to Infostealer Malware An affected Claude user has shared a warning from Anthropic stating that infostealer malware can steal active Claude login sessions from infected…
SOCRadar
Critical Avada WordPress Flaw (CVE-2026-18431) Enables RCE
Critical Avada WordPress Flaw (CVE-2026-18431) Enables RCE A critical vulnerability chain tracked as CVE-2026-18431 affects the Avada WordPress theme and its required Fusion Builder plugin, now branded as Avada Builder…
SOCRadar
WhatsApp Says One Billion Users Are Now Protected by Passkeys
WhatsApp Says One Billion Users Are Now Protected by Passkeys The milestone signals that phishing-resistant authentication has moved into the consumer mainstream, while new controls target registration code theft and…