What's Out There About You on the Dark Web? Scan for Leaks Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Binance Hack: Inside the $6.3B Hot Wallet Theft SOCRadar

Binance Hack: Inside the $6.3B Hot Wallet Theft

[Update] November 10, 2026: Binance Denies Breach Claim by Alleged ShinyHunters Seller [Update] November 4, 2026: Binance Traces the Breach to a Fake Job Interview [Update] November 3, 2026: Binance…

Slug: n0n-ransomware-ai-assisted-extortion SOCRadar

n0n Ransomware: Inside an AI-Assisted Extortion Operation

SOCRadar analyzes an exposed n0n ransomware workspace: AI-built tooling, FortiGate credential stuffing, firewall sabotage and 23 compromised organizations…

September 2026: FBI Breach, Clop Hijack & IDScan Leak SOCRadar

September 2026: FBI Breach, Clop Hijack & IDScan Leak

The major cyber attacks of September 2026 hit federal law enforcement, a rival cybercrime gang, and the companies that verify identities. ShinyHunters hijacked the Clop ransomware gang's Dark Web leak…

Australia’s Annual Cyber Threat Report 2025-26 Shows Cyber Incidents Up 20% SOCRadar

Australia’s Annual Cyber Threat Report 2025-26 Shows Cyber Incidents Up 20%

Australia’s cyber security authority responded to 1,524 cyber security incidents in the 2025-26 financial year, a 20% increase from the previous year and a 36% rise over five years. The…

PHP2Shell Weaponized After Japanese Real Estate Extortion SOCRadar

PHP2Shell Weaponized After Japanese Real Estate Extortion

An exposed server ties an extortion wave on about 20 Japanese property sites to an operator who later weaponized PHP2Shell (CVE-2026-109618, CVE-2026-109619)…

Wasmtime Sandbox Escape Flaws Patched in Cranelift SOCRadar

Wasmtime Sandbox Escape Flaws Patched in Cranelift

Two critical Wasmtime sandbox escape flaws, CVE-2026-115889 and CVE-2026-115893, let a crafted WebAssembly (Wasm) module push the Cranelift compiler into generating unsafe machine code. The Bytecode Alliance fixed both on…

Slug: node2shell-brotli-python-package SOCRadar

Node2Shell: Brotli Flaw Hits Python Packages

[Update] October 28, 2026: CISA Adds Node2Shell to KEV as Exploit Traffic Emerges [Update] October 27, 2026: PHP Ships Windows Builds With Brotli Fix The Node2Shell Brotli flaw (CVE-2026-111497), disclosed…

Slug: finaxis-wowinstaller-moodle-myhaircare-ht-medica-leaks/ SOCRadar

Finaxis, WoWInstaller, Moodle, MyHairCare & HT Médica Leaks

SOCRadar Dark Web Team identified several underground posts, including an alleged Finaxis.cloud data sale involving 400GB of information, a resurfaced WoWInstaller database containing historical user credentials, and an alleged Argentine…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action