Latest articles
SOCRadar
Bitwarden CLI Hijacked in npm Supply Chain Attack Linked to TeamPCP & Checkmarx Breach
A malicious version of the Bitwarden CLI circulated on npm for roughly 90 minutes on April 22, 2026, silently stealing developer credentials, cloud secrets, and CI/CD tokens before exfiltrating them…
SOCRadar
How AI Changed Vishing: Case of PlugValley
Vishing or voice phishing is not a new attack. Fraudsters have been calling people and pretending to be banks, government agencies, and tech support for decades. What has changed is…
SOCRadar
CVE-2026-38526 in Krayin CRM Enables RCE
CVE-2026-38526 is a critical authenticated remote code execution (RCE) vulnerability affecting Webkul Krayin CRM / Krayin Laravel CRM v2.2.x. The issue is in the admin-side TinyMCE media upload feature and…
SOCRadar
Vercel Breach: Hacker Claims to Sell Stolen Data in Potential Global Supply Chain Attack
On April 19, 2026, Vercel, the cloud development platform behind Next.js and Turbopack, disclosed a security incident following a threat actor’s public claim to be selling stolen corporate data on…
SOCRadar
Public Elasticsearch Servers Expose 9.8 Billion Credential Records Across Enterprise, Cloud, and AI Platforms
Misconfigured Elasticsearch servers continue to expose massive volumes of sensitive data. This time, SOCRadar’s AI-powered Sensitive Data Exposure Monitoring service identified three publicly accessible Elasticsearch instances containing more than 9.8…
SOCRadar
BlueHammer, RedSun, and UnDefend: Three Windows Defender Zero-Days Exploited in the Wild
[Update] July 3, 2026: CISA Flags BlueHammer as Exploited in Ransomware Campaigns Three Windows Defender vulnerabilities disclosed as zero-days in April 2026 are now being actively exploited: BlueHammer, RedSun, and…
SOCRadar
April 2026 Patch Tuesday: 165 Vulnerabilities, Two Zero-Days Including One Actively Exploited
Microsoft released its April 2026 Patch Tuesday security updates, resolving a total of 165 vulnerabilities across Windows and multiple Microsoft products and components. This month’s release includes two zero-day vulnerabilities:…
SOCRadar
CVE-2026-34486: Apache Tomcat Tribes Regression Creates Unauthenticated RCE Path
Apache Tomcat users running Tribes clustering should pay attention to CVE-2026-34486, an important-severity regression that can turn an exposed cluster receiver into an unauthenticated remote code execution (RCE) opportunity. The…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action