Latest articles
SOCRadar
ShinyHunters Breached Instructure: 275 Million Students, Teachers and Staff Potentially Exposed
If your school uses Canvas, your data may already be in the hands of one of the most active hacking groups on the planet. On May 1, 2026, Instructure, the…
SOCRadar
CVE-2026-4670 & CVE-2026-5174: MOVEit Automation Flaws Enable Auth Bypass and Privilege Escalation
Progress Software has disclosed and patched two vulnerabilities in MOVEit Automation, its managed file transfer automation and workflow engine. CVE-2026-4670 is an authentication bypass, and CVE-2026-5174 is a privilege escalation…
SOCRadar
March 2026: Wiper Attack Paralyzes Stryker as BPO Breaches & Data Thefts Sweep the Month
March 2026 brought a heavy concentration of significant cyber incidents across healthcare, outsourcing, software supply chains, and the entertainment sector. A politically motivated wiper attack against a major medical device…
SOCRadar
CVE-2026-31431: “Copy Fail,” the Nine-Year-Old Linux Bug Introduced in 2017
A vulnerability hiding in plain sight for nearly a decade, capable of granting full root access to almost any Linux server with just a 732-byte Python script. Meet “Copy Fail”…
SOCRadar
Chinese Cybercrime Infrastructure Detected: Automated Exploitation & Harvesting Infrastructure
SOCRadar Threat Research Team identified automated Chinese cybercrime infrastructure that blends large-scale exploitation with structured orchestration and monetization. The operation is coordinated through a centralized backend (referred to as ‘paperclip‘)…
SOCRadar
SAP Ecosystem Targeted: The Mini Shai-Hulud Supply Chain Attack
A sophisticated npm supply-chain compromise dubbed “Mini Shai-Hulud” has recently emerged, creating an urgent risk for SAP CAP development teams and CI/CD environments. Threat actors leverage trusted packages to deliver…
SOCRadar
CVE-2026-3854 Exposes a Critical Weak Point in GitHub’s Git Push Pipeline
A newly disclosed GitHub vulnerability, CVE-2026-3854, has drawn attention because it turned a routine git push operation into a path to remote code execution . The issue affected GitHub’s git…
SOCRadar
Handala Hack Targets U.S. Troops with Doxxing Threats in Bahrain
On Monday, U.S. service members stationed in Bahrain started getting WhatsApp messages on their personal phones telling them they were being watched and that missiles and drones were already aimed…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action