Latest articles
SOCRadar
OSINT Tools for Cybersecurity: A Practical Guide for Security Teams
Attackers are already running open source intelligence operations against your organization. Before writing a single line of exploit code, they are mapping your exposed infrastructure, harvesting employee credentials from breach…
SOCRadar
What Is Attack Surface Management (ASM)?
Attack Surface Management (ASM) is the continuous discovery, monitoring, and prioritization of an organization’s exposed digital assets, including cloud infrastructure, SaaS applications, internet-facing systems, identities, and third-party integrations. The goal…
SOCRadar
Klue Breach: What You Need to Know
The Klue breach shows how stolen OAuth tokens from a trusted SaaS integration can expose Salesforce CRM data. Learn what happened, which companies confirmed impact, what data was exposed, and…
SOCRadar
WhatsApp VBScript Campaign Installs ManageEngine Endpoint Central for Persistent Remote Access
A newly reported malware campaign uses WhatsApp direct messages to deliver VBScript (VBS/VBE) attachments that look like routine business documents. If a recipient downloads and then opens the attachment in…
SOCRadar
Top Dark Web Telegram Groups & Channels 2026
Note: This article is intended for cybersecurity awareness and research purposes only. It does not promote or endorse illegal content. The top Dark Web Telegram channels and groups monitored in…
SOCRadar
Top 10 Dark Web Markets in 2026: List & Threat Analysis
Dark Web marketplaces in 2026 are underground platforms where cybercriminals buy and sell stolen data, credentials, stealer logs, payment card records, malware, fraud services, counterfeit documents, drugs, and access to…
SOCRadar
Alleged FortiBleed Access Auction, Sens Unique Paris Data Sale, and libsodium DoS Claims
SOCRadar Dark Web Team identified new underground activity involving alleged FortiBleed-related access, an alleged 529,892-record customer database linked to French retailer Sens Unique Paris, and a claimed libsodium and NaCl…
SOCRadar
CVE-2026-20253: CISA Warns of Actively Exploited Splunk Enterprise RCE
Splunk Enterprise admins should prioritize patching CVE-2026-20253, a critical vulnerability that allows a network-reachable, unauthenticated attacker to create or truncate arbitrary files on the Splunk server. Under certain conditions, this…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action