Latest articles
SOCRadar
TrapDoor: Malicious npm, PyPI, Crates.io Packages Target Developer Secrets & AI Tooling
Researchers identified a coordinated supply chain malware campaign named TrapDoor, involving waves of malicious packages across npm, PyPI, and Crates.io. Public reports tie the activity to credential theft and environment…
SOCRadar
Dark Web Profile: CoinbaseCartel
CoinbaseCartel is a financially motivated threat actor that emerged on the Dark Web in September 2025. Unlike traditional ransomware groups, the group does not encrypt victim systems. Instead, it relies…
SOCRadar
CVE-2026-20223: Cisco Secure Workload Auth Bypass Grants Site Admin Access
Cisco has patched a maximum-severity vulnerability in Cisco Secure Workload (CSW) Cluster Software tracked as CVE-2026-20223. The issue is an authentication and access-control bypass affecting internal REST API endpoints, and…
SOCRadar
How Dark Data Leaves Security Teams One Step Behind
Cyber Threat Intelligence has come a long way. In the past, real-time threat feeds, dark web monitoring, and indicator-sharing platforms were reserved for governments and Fortune 500 companies. Today, 90%…
SOCRadar
CVE-2024-12802: SonicWall SSL-VPN MFA Bypass Persists on Gen6
CVE-2024-12802 is an authentication bypass that can result in an SSL-VPN MFA bypass affecting SonicWall SonicOS / SonicWall SSL-VPN when the VPN is integrated with Microsoft Active Directory (AD) in…
SOCRadar
Verizon 2026 DBIR: 10 Takeaways You Should Know
Verizon’s 2026 Data Breach Investigations Report (DBIR) analyzes more than 31,000 security incidents and 22,000 confirmed breaches across organizations in 145 countries, the largest breach dataset the report has ever…
SOCRadar
TeamPCP GitHub Breach: Internal GitHub Repositories Allegedly Accessed
TeamPCP is back in the headlines, and this time the target is not a plugin, a CI/CD pipeline, or an open-source package. The group is claiming access to GitHub itself,…
SOCRadar
B1ack’s Stash Releases 4.6 Million Stolen Credit Cards for Free
A notorious Dark Web carding marketplace is making headlines again. B1ack’s Stash, one of the most active illicit card shops on the Dark Web, has announced the free release of…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action