What's Out There About You on the Dark Web? Scan for Leaks Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Dark Web Profile: Nova Ransomware SOCRadar

Dark Web Profile: Nova Ransomware

Nova is a ransomware group that operates a Ransomware-as-a-Service (RaaS) model to extort organizations through file encryption and data theft. Nova equips affiliates with a Rust-based encryptor and threatens to…

Zyxel GS1900 Zero-Day: Patch 3 Fixes Bypassed Bug SOCRadar

Zyxel GS1900 Zero-Day: Patch 3 Fixes Bypassed Bug

Zyxel has released new firmware for 10 GS1900 switch models to fix CVE-2026-107441, an out-of-bounds write that lets an unauthenticated attacker run OS commands on the switch. The flaw sits…

SonicWall GMS Flaws Unpatched After End of Life SOCRadar

SonicWall GMS Flaws Unpatched After End of Life

SonicWall has disclosed two vulnerabilities in its Global Management System (GMS) and says it will not fix either of them. The more severe flaw, CVE-2026-109593, lets an unauthenticated attacker with…

ARTEX AI Pentest Tool: What Security Teams Need to Know SOCRadar

ARTEX AI Pentest Tool: What Security Teams Need to Know

ARTEX AI has moved from a GitHub research project to the engine behind some of the fastest-moving agentic AI cyberattacks of 2026. ARTEX is an autonomous penetration testing framework that…

KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theft SOCRadar

KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theft

The KeyHunter Operation pairs LLM key theft with an academic fraud campaign that reaches Harvard alumni data, Stanford applications and 18 other universities. SOCRadar’s Threat Research Unit (STRU) attributes the…

Supermarket Freezer Attacks Reach Belgium, Sweden, Luxembourg SOCRadar

Supermarket Freezer Attacks Reach Belgium, Sweden, Luxembourg

[Update] November 5, 2026: NoName057(16) and Z-Pentest Claim the Refrigeration Attacks Supermarket freezer attacks have moved beyond France. Overnight into Monday, November 2, 2026, refrigeration systems at dozens of stores…

Ivanti Connect Secure Zero-Day Chain Enables Root Access SOCRadar

Ivanti Connect Secure Zero-Day Chain Enables Root Access

A previously unknown threat actor tracked as UTA0576 chained three Ivanti Connect Secure zero-day vulnerabilities to run code as root on VPN appliances without logging in. The attacks began in…

Pataya Food Leak, Belgian Military Data, China Housing Fund, Anka DDoS, and Vijay Sales Access SOCRadar

Pataya Food Leak, Belgian Military Data, China Housing Fund, Vijay Sales Access, and Vercel Data Sale

SOCRadar Dark Web Team identified several underground posts, including an alleged 500GB Pataya Food data leak, an alleged Belgian military archive containing more than 2,700 files, and an alleged Chinese…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action