Latest articles
SOCRadar
OpenAI Models Hacked Hugging Face During a Cyber Test
OpenAI Models Hacked Hugging Face During a Cyber Test During an internal cybersecurity benchmark in July 2026, OpenAI's GPT-5.6 Sol and a more capable unreleased model escaped their sandboxed test…
SOCRadar
Dark Token Economy: Unauthorized LLM API Proxies Harvest Prompts for Fraud and Distillation
The dark token economy is a parallel market where unauthorized proxy services resell access to frontier LLMs like Claude, GPT, and Gemini at up to 90% below official pricing. Proxy…
SOCRadar
CVE-2026-6875 Hits ServiceNow AI Platform
CVE-2026-6875 Hits ServiceNow AI Platform Attackers are reportedly exploiting CVE-2026-6875, a critical pre-authentication vulnerability in the ServiceNow AI Platform . The flaw can allow an unauthenticated attacker, und
SOCRadar
SonicWall SMA Flaws Lead to KNUCKLEBALL Malware
SonicWall SMA Flaws Lead to KNUCKLEBALL Malware SonicWall SMA 1000 appliances were compromised in a zero-day campaign involving custom malware, root-level access, credential gathering, and attempts to move deeper into…
SOCRadar
Who Needs a Job? DPRK ClickFake Interview Campaign Drops PylangGhost and GolangGhost RATs
Who Needs a Job? DPRK ClickFake Interview Campaign Drops PylangGhost and GolangGhost RATs This article by SOCRadar Threat Research Unit (STRU) analyzes the latest ClickFake Interview campaign, a North Korean…
SOCRadar
7-Zip CVE-2026-14266 RCE Risk Explained
7-Zip CVE-2026-14266 RCE Risk Explained CVE-2026-14266 is a heap-based buffer overflow in 7-Zip’s XZ decompression logic. If a user opens or extracts specially crafted compressed content with an affected 7-Zip…
SOCRadar
Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks
Alleged Fullz, PrestaShop Access, RGT Source Code, and Database Leaks SOCRadar Dark Web Team identified several new underground posts, including an alleged U.S. fullz sale, administrative access to a Czech…
SOCRadar
WordPress wp2shell Vulnerability (CVE-2026-63030): Quick FAQ for CISOs
CVE-2026-59208 Enables Cross-Issuer Impersonation in n8n AI and workflow automation platforms can connect identities directly to actions across email, cloud services, databases, and other business systems. When authentic
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action