Latest articles
SOCRadar
Okta Vishing Campaign Allegedly Linked to ShinyHunters: What You Need to Know
A recent disclosure from Okta has brought renewed attention to how voice phishing (vishing) campaigns are evolving to bypass widely deployed identity security controls. A key factor driving this shift is a…
SOCRadar
Oracle January 2026 CPU Delivers 337 Security Patches Including CVE-2025-66516 & CVE-2026-21962
Oracle has kicked off 2026 with a sizable security release that will immediately catch the attention of security teams. The January 2026 Critical Patch Update (CPU) delivers 337 new security…
SOCRadar
CVE-2026-20045 Actively Exploited Cisco Unified Communications Zero-Day Explained
In late January 2026, Cisco released emergency patches for CVE-2026-20045, a critical Remote Code Execution (RCE) vulnerability affecting its Unified Communications products. The issue has been confirmed as actively exploited…
SOCRadar
Anthropic Git MCP Server Vulnerabilities Involving Path Traversal and Argument Injection
Security researchers recently disclosed multiple vulnerabilities affecting mcp-server-git, the official Git server implementation for the Model Context Protocol (MCP) maintained by Anthropic. While the flaws have already been fixed, the…
SOCRadar
CVE-2025-64155: Critical FortiSIEM Flaw Allows Remote Root Access
Fortinet has released security updates addressing a critical vulnerability in its FortiSIEM platform that allows unauthenticated remote attackers to execute arbitrary code on affected systems. Tracked as CVE-2025-64155, the flaw…
SOCRadar
Telegram Leaks Exposed: Critical IP Leak
The “One-Click Telegram IP leak” vulnerability has emerged as a serious privacy oversight, allowing threat actors to deanonymize users instantly. Security researchers discovered that the platform’s automatic verification of proxy…
SOCRadar
January 2026 Patch Tuesday: Active Zero-Day & 111 Other Flaws Addressed
Microsoft released its January 2026 Patch Tuesday security updates, resolving a total of 112 vulnerabilities across Windows and multiple Microsoft products and components. The release includes three zero-day vulnerabilities, one…
SOCRadar
December 2025: Coupang & WIRED Data Leaks, Record DDoS, React2Shell Exploitation
December 2025 closed with a heavy mix of consumer-scale data exposure, supply-chain style vendor fallout, and fast-moving exploitation of newly tracked application flaws. Major themes included insider risk and weak…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action