SOCRadar
Featured
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Flaws, Affected Versions, and How to Fix Them
PHP2Shell: two critical PHP RCE flaws (CVSS 9.2). Affected and fixed versions, why workarounds fail, detection signals, and a free exposure checker.
Editor's picks.
Latest articles
SOCRadar
September 2026: FBI Breach, Clop Hijack & IDScan Leak
The major cyber attacks of September 2026 hit federal law enforcement, a rival cybercrime gang, and the companies that verify identities. ShinyHunters hijacked the Clop ransomware gang's Dark Web leak…
SOCRadar
Australia’s Annual Cyber Threat Report 2025-26 Shows Cyber Incidents Up 20%
Australia’s cyber security authority responded to 1,524 cyber security incidents in the 2025-26 financial year, a 20% increase from the previous year and a 36% rise over five years. The…
SOCRadar
Wasmtime Sandbox Escape Flaws Patched in Cranelift
Two critical Wasmtime sandbox escape flaws, CVE-2026-115889 and CVE-2026-115893, let a crafted WebAssembly (Wasm) module push the Cranelift compiler into generating unsafe machine code. The Bytecode Alliance fixed both on…
SOCRadar
Finaxis, WoWInstaller, Moodle, MyHairCare & HT Médica Leaks
SOCRadar Dark Web Team identified several underground posts, including an alleged Finaxis.cloud data sale involving 400GB of information, a resurfaced WoWInstaller database containing historical user credentials, and an alleged Argentine…
SOCRadar
CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access
CVE-2026-114625 is an actively exploited SQL injection flaw in VeloCloud Orchestrator that lets authenticated users gain superuser operator privileges…
SOCRadar
New LiteLLM Supply Chain Attack Hits PyPI and Docker
A new LiteLLM supply chain attack has turned version 1.107.0, an official release of the popular open-source LLM gateway, into a credential stealer. On October 21, 2026, attackers used stolen…
SOCRadar
eMudhra CA Key Compromise: Weak Keys, Risks and Fixes
The eMudhra CA key compromise is a certificate authority (CA) security incident in which eight intermediate certificates issued by eMudhra, an Indian digital trust provider, carried private keys that anyone…
SOCRadar
30 Questions to Ask Before Buying an AI Pentesting Tool
"AI pentesting" now covers very different products. Some platforms plan and run attack chains on their own and return exploitation evidence for every finding. Others are vulnerability scanners with a…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action