Latest articles
SOCRadar
December 2025 Patch Tuesday: 3 Zero-Days Fixed, CVE-2025-62221 Actively Exploited
Microsoft has released its December 2025 Patch Tuesday updates, addressing 57 security vulnerabilities across Windows, Office, and other Microsoft components. This month’s rollout includes three zero-day vulnerabilities – one actively…
SOCRadar
November 2025: Breaches at Coupang, Balancer, Gainsight, Eurofiber & More
November 2025 brought another wide mix of high-impact cyber incidents, ranging from one of South Korea’s largest-ever data exposures to major disruptions in Japan’s beverage industry and a significant Web3…
SOCRadar
React2Shell: Critical RCE in React and Next.js Explained
[Update] October 1, 2024: “React2Shell Exploitation Now Confirmed in the Wild” A new Remote Code Execution (RCE) vulnerability, widely referred to as React2Shell, has been identified in the React Server…
SOCRadar
The Marquis Software Data Breach: What It Means For Banks, Credit Unions, And Their Customers
U.S. regulators and media outlets confirmed a major data breach at Marquis Software Solutions, a Texas based vendor that works with hundreds of community banks and credit unions across the…
SOCRadar
December 2025 Android Security Bulletin: Two Zero-Day Flaws Exploited
Google has published the December 2025 Android Security Bulletin, addressing 100+ vulnerabilities across core platform and vendor components. The update introduces two patch levels (2025-12-01 and 2025-12-05). Importantly, Google reports…
SOCRadar
AI-Powered Cyber Espionage: Inside the GTG-1002 Campaign
The cybersecurity world is facing a new kind of threat, AI-powered cyber espionage. The GTG-1002 campaign, uncovered between 2022 and 2025, marks the first large-scale AI-orchestrated cyberattack linked to a…
SOCRadar
OpenAI Notifies Users of Mixpanel Security Incident
A recent security incident involving Mixpanel, a third-party analytics provider that OpenAI used to track frontend web interactions on its API platform, has raised important questions. On November 26, 2025,…
SOCRadar
Shai Hulud’s “The Second Coming”: New npm Campaign Hits Zapier, ENS, Postman
Security teams face yet another npm supply chain emergency. A new wave of Shai Hulud: The Second Coming. The worm has trojanized hundreds of packages from major projects like Zapier,…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action