Latest articles
SOCRadar
EDR Terminator Sale, Alleged Adobe Business Leak, Serbia MUP Data Offer, and Argentina BCRA IOMA GDEBA Claims
SOCRadar Dark Web Team identified several new underground posts, including a listing advertising a kernel-level “EDR/XDR terminator” package, a separate claim of an 832.87GB “Adobe Business” data collection, and two…
SOCRadar
Inside The Gentlemen Ransomware Leak: When the Hunter Becomes the Hunted
Ransomware groups spend their days breaking into networks, stealing data, and pressuring victims into paying. They rarely find themselves on the other side of that equation. But in early May…
SOCRadar
CVE-2026-20182: Cisco Catalyst SD-WAN Auth Bypass Added to CISA KEV
Cisco has disclosed CVE-2026-20182, a critical authentication bypass affecting Cisco Catalyst SD-WAN Controller (formerly vSmart) and Cisco Catalyst SD-WAN Manager (formerly vManage). The flaw is in the peering authentication /…
SOCRadar
CVE-2026-42945: NGINX Rewrite Heap Overflow Enables Remote DoS & Potential RCE
CVE-2026-42945 is a heap-based buffer overflow in NGINX that occurs in ngx_http_rewrite_module (the rewrite module). The bug is remotely reachable over HTTP and can be triggered without authentication when specific…
SOCRadar
Top 5 Surface Web Hacker Forums in 2026
Security teams often associate cybercrime forums exclusively with the Dark Web and Tor. However, several of the most active underground communities now operate openly on the surface web, accessible via…
SOCRadar
BreachForums & TeamPCP Promote Supply Chain Competition as Cybercrime Gets Gamified
Underground cybercrime communities are increasingly borrowing ideas from legitimate tech ecosystems: branding, public challenges, shared tools, reputation building, and even prize-based competitions. Recently BreachForums and TeamPCP promoted what they describe…
SOCRadar
SOCRadar’s Free Ransomware Intelligence Dashboard: Track Live Ransomware Activity
The ransomware threat intelligence community has been doing incredible work making data more accessible from projects like Ransomware.live, Ransomlook, and CTI.fyi to curated resources like Will Thomas’s Awesome-Ransomware repo on…
SOCRadar
Dark Web Profile: Keymous+
Keymous Plus, also known as Keymous+ threat group, markets itself as a hacktivist collective fighting for humanity. What intelligence investigations have documented is structurally different: a North African hybrid actor…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action