Latest articles
SOCRadar
OpenClaw’s ClawJacked Vulnerability Explained, What Organizations Need to Know?
OpenClaw, along with its recent exploitation technique called ClawJacked, has raised concerns about how cloud-based development environments handle authentication and token exposure. Security researchers recently revealed that malicious websites could…
SOCRadar
Claude Code Security: What It Is, What It Isn’t?
When Anthropic released Claude Code Security on February 20, 2026, cybersecurity stocks dropped almost immediately. A few days later, Anthropic announced Claude could read and repair COBOL, and IBM shares…
SOCRadar
CVE-2026-20127: Cisco Catalyst SD-WAN Auth Bypass Exploited In The Wild
Cisco recently disclosed a zero-day, tracked as CVE-2026-20127, warning that the issue is already being actively exploited in real-world environments. The vulnerability affects Cisco Catalyst SD-WAN control and management components…
SOCRadar
SolarWinds Serv-U 15.5.4 Fixes Four Privileged RCE Vulnerabilities
SolarWinds has released Serv-U 15.5.4 to address four high-impact vulnerabilities affecting Serv-U 15.5. While these issues require administrative privileges to exploit, they can ultimately lead to privileged native code execution.…
SOCRadar
Critical Elasticsearch Exposure: 544M Plain-Text Credentials Found Publicly Accessible
SOCRadar’s AI-powered Sensitive Data Exposure Monitoring service identified a publicly accessible and misconfigured Elasticsearch instance containing approximately 544,322,698 records. The database was exposed directly to the internet without authentication controls.…
SOCRadar
Severe VS Code Extension CVEs Expose Developers to RCE and File Exfiltration
A recent report highlighted a coordinated disclosure affecting four popular Visual Studio Code (VS Code) extensions: Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft Live Preview. Three of the…
SOCRadar
Public Elasticsearch Instances Expose 43M+ Records Including Credentials, Credit Cards, and Customer Data
SOCRadar’s AI-powered Sensitive Data Exposure Monitoring service has identified three publicly accessible and misconfigured Elasticsearch instances leaking highly sensitive data, including infostealer logs, credit card information, and millions of personal…
SOCRadar
CVE-2026-2441: Chrome Zero-Day Enables In-Sandbox Code Execution
Google has patched CVE-2026-2441, noting that it is “aware that an exploit for CVE-2026-2441 exists in the wild” as of the Stable Channel update published on February 13, 2026. This…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action