Top Nation-State Cyber Threats Targeting the United States
Top Nation-State Cyber Threats Targeting the United States Most cyber risk in the United States starts with something simple: stolen data and stolen access getting traded for profit. In SOCRadar’s 202...
AI-Driven Threats Targeting U.S. Organizations
AI-Driven Threats Targeting U.S. Organizations Artificial intelligence has become a force multiplier across the cybersecurity landscape. U.S. organizations are investing heavily in AI to improve detec...
International AI Safety Report 2026: Key Facts Leaders Should Know
International AI Safety Report 2026: Key Facts Leaders Should Know On a Tuesday morning, a security analyst reviews a suspicious email that appears to come from the finance team. The writing is polish...
Dark Web Profile: The Gentlemen Ransomware
Dark Web Profile: The Gentlemen Ransomware Despite its polished name, The Gentlemen Ransomware shows little interest in playing nice. First observed in 2025, the group quickly established itself as a ...
January 2026: Instagram, BreachForums, SoundCloud Leaks, Trust Wallet ...
January 2026: Instagram, BreachForums, SoundCloud Leaks, Trust Wallet Backdoor January 2026 incident disclosures spanned consumer platforms, enterprise identity workflows, and the cybercrime ecosystem...
February 2026 Patch Tuesday: Six Active Zero-Days & 53 Other Flaws Add...
February 2026 Patch Tuesday: Six Active Zero-Days & 53 Other Flaws Addressed Microsoft released its February 2026 Patch Tuesday security updates, resolving a total of 59 vulnerabilities across Win...
The Strategic Case for MSSP Partnership
The Strategic Case for MSSP Partnership Security tools are widely deployed, well documented, and tested in predictable ways, and threat actors know this. There is ongoing discussion among threat actor...
CVE-2026-1731: RCE Risk in BeyondTrust RS and PRA
CVE-2026-1731: RCE Risk in BeyondTrust RS and PRA BeyondTrust has disclosed CVE-2026-1731, a vulnerability that enables Remote Code Execution (RCE) in BeyondTrust Remote Support (RS) and Privileged Re...
Alleged Suno Data, Card Dump, ASUS Records & Air France Access Sale
Alleged Suno Data, Card Dump, ASUS Records & Air France Access Sale SOCRadar’s Dark Web Team identified several new underground listings this week, including an alleged database and source code sa...
How Third-Party Risk Management Turns Vendor Exposure Into Actionable ...
How Third-Party Risk Management Turns Vendor Exposure Into Actionable Defense In modern environments, third-party risk management failures are often the entry point attackers rely on. Compromise usual...
Italy and Germany Under DDoS Assault: Weekly DDoS Threat Intelligence ...
Italy and Germany Under DDoS Assault: Weekly DDoS Threat Intelligence Analysis Analysis Period: February 2–8, 2026 Between February 2 and 8, 2026, SOCRadar identified an extensive coordinated DDoS cam...
CVE-2026-25049: n8n Expression Sandbox Escape Enables RCE
CVE-2026-25049: n8n Expression Sandbox Escape Enables RCE n8n is widely used to automate business workflows, which also means it often sits close to credentials, internal APIs, and sensitive data. A n...
Dark Web Profile: 0APT Ransomware
Dark Web Profile: 0APT Ransomware 0APT, also recognized as the 0APT Syndicate, is a controversial Ransomware-as-a-Service operation that surfaced in late January 2026. The group rapidly gained notorie...
CVE-2025-11953 (Metro4Shell) in React Native Metro Server Enables RCE
CVE-2025-11953 (Metro4Shell) in React Native Metro Server Enables RCE A critical security flaw in the React Native Community CLI Metro development server has drawn attention following confirmed real-w...
Multi-Country DDoS Campaign: Weekly DDoS Threat Intelligence Analysis
Multi-Country DDoS Campaign: Weekly DDoS Threat Intelligence Analysis Analysis Period: January 26 – February 1, 2026 Between January 26 and February 1, 2026, SOCRadar identified an extensive coordinat...
What the Moltbook Exposure Reveals About AI Platforms and Security Rea...
What the Moltbook Exposure Reveals About AI Platforms and Security Readiness? A recent security finding involving Moltbook briefly pushed the platform into the spotlight – not because of a technical b...
CVE-2026-21509: APT28 Actively Exploits Microsoft Office Vulnerability...
CVE-2026-21509: APT28 Actively Exploits Microsoft Office Vulnerability in Ukraine On January 26, 2026, Microsoft released an update to address CVE-2026-21509, a high-severity vulnerability affecting n...
Notepad++ Infrastructure Hijacked in State-Linked Supply Chain Attack
Notepad++ Infrastructure Hijacked in State-Linked Supply Chain Attack Notepad++, one of the most widely used open-source text editors, has disclosed a security incident that did not stem from a softwa...
Dark Web Posts Claim Argaam User Data, Paage Records, and Airport Data...
Dark Web Posts Claim Argaam User Data, Paage Records, and Airport Database SOCRadar’s Dark Web Team identified several new underground listings this week, including alleged database sales linked to Ar...
Epstein Files Guide: How to Reliably Search the Epstein Files?
Epstein Files Guide: How to Reliably Search the Epstein Files? This guide is for informational purposes only. The release of Jeffrey Epstein’s investigative files has been one of the most significant...