Latest articles
SOCRadar
CVE-2026-26956: vm2 Sandbox Escape Enables Host RCE in Node.js 25
CVE-2026-26956 is a critical sandbox escape affecting the Node.js sandbox library vm2. In vm2 3.10.4, attacker-controlled JavaScript executed through VM.run() can break out of the sandbox and reach the host…
SOCRadar
CVE-2026-23918: Apache HTTP Server HTTP/2 Double Free With Possible RCE
CVE-2026-23918 is a vulnerability in Apache HTTP Server (httpd) that affects its HTTP/2 implementation and can lead to a double free during an HTTP/2 stream “early reset” condition. Apache describes…
SOCRadar
CVE-2026-0300 Enables Root RCE in PAN-OS Captive Portal
Palo Alto Networks disclosed CVE-2026-0300, a critical pre-authentication buffer overflow in the User-ID™ Authentication Portal (Captive Portal) service in PAN-OS. Under the right exposure conditions, an unauthenticated attacker can trigger…
SOCRadar
Trellix Source Code Repository Incident: What Defenders Should Know
Trellix publicly disclosed that it identified unauthorized access to a portion of its internal source code repository. The company said it engaged external forensic experts, notified law enforcement, and, as…
SOCRadar
ShinyHunters Breached Instructure: 275 Million Students, Teachers and Staff Potentially Exposed
If your school uses Canvas, your data may already be in the hands of one of the most active hacking groups on the planet. On May 1, 2026, Instructure, the…
SOCRadar
CVE-2026-4670 & CVE-2026-5174: MOVEit Automation Flaws Enable Auth Bypass and Privilege Escalation
Progress Software has disclosed and patched two vulnerabilities in MOVEit Automation, its managed file transfer automation and workflow engine. CVE-2026-4670 is an authentication bypass, and CVE-2026-5174 is a privilege escalation…
SOCRadar
Top 10 Ways Hackers Use AI for Cyber Attacks
Artificial intelligence is reshaping every industry, including cybercrime. But unlike most professionals watching AI with caution, threat actors are welcoming it with open arms. Threat actors now use generative AI…
SOCRadar
WhatsApp Number Leak, OpenVPN Access Sale, LiteLLM Exploit Scanner, BIN Leads Listing, and PHI Buyer Post
SOCRadar Dark Web Team identified several new underground posts, including a claim of 20.65 million Indonesian WhatsApp numbers being shared, a separate listing advertising OpenVPN access into an Indian financial…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action