Latest articles
SOCRadar
What Is FortiBleed? Your Questions Answered
1. What is FortiBleed? FortiBleed is an active, large-scale credential theft campaign targeting internet-exposed Fortinet FortiGate firewalls and SSL VPN gateways. The same threat actor has also been observed targeting…
SOCRadar
CVE-2026-42530 & CVE-2026-42055: F5 Patches NGINX Vulnerabilities
F5 has released out-of-band security updates for two NGINX vulnerabilities that can affect exposed web infrastructure: CVE-2026-42530 and CVE-2026-42055. The first issue affects NGINX’s HTTP/3 QUIC handling. The second affects…
SOCRadar
SOCRadar Launches Free FortiBleed Exposure Checker and Publishes the Most Extensive Dataset on the Fortinet Credential Leak
The team that first analyzed the FortiBleed leak now opens its research to the public, having already alerted thousands of customers and national CERTs — and invites every government cybersecurity…
SOCRadar
FortiSandbox Vulnerabilities Expose Systems to Auth Bypass and Command Execution
Fortinet FortiSandbox administrators should review their environments after several critical vulnerabilities raised concern around authentication bypass and command execution risks. The flaws affect FortiSandbox API and Web UI components. In…
SOCRadar
May 2026: TeamPCP’s Supply Chain Blitz Hits Checkmarx, GitHub, and npm
May 2026 was defined by two threat actors operating at full intensity in parallel. ShinyHunters executed a major education-sector attack, exploiting a low-friction account program to breach Instructure’s Canvas platform,…
SOCRadar
FortiBleed: SOCRadar’s Investigation into 86,644 Compromised Fortinet Firewalls
[Updated: June 29th 9 AM EST] SOCRadar has attributed FortiBleed to the Lynx / INC ransomware group. The full technical report is here . FortiBleed is an active, large scale…
SOCRadar
Top 5 Phishing Domain Takedown Service
Phishing attacks remain one of the most persistent and scalable threats facing organizations today. In Q1 2026 alone, approximately 8.3 billion email-based phishing threats detected . Phishing-as-a-Service (PhaaS) platforms now…
SOCRadar
CVE-2026-20262: Cisco Catalyst SD-WAN Manager Zero-Day Leads to Root
CVE-2026-20262 is a zero-day vulnerability in Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) that lets an authenticated attacker with low privileges (at least write access) write files to unintended locations…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action