What's Out There About You on the Dark Web? Scan for Leaks Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

CVE-2026-3854 Exposes a Critical Weak Point in GitHub’s Git Push Pipeline SOCRadar

CVE-2026-3854 Exposes a Critical Weak Point in GitHub’s Git Push Pipeline

A newly disclosed GitHub vulnerability, CVE-2026-3854, has drawn attention because it turned a routine git push operation into a path to remote code execution . The issue affected GitHub’s git…

Handala Hack Targets U.S. Troops with Doxxing Threats in Bahrain SOCRadar

Handala Hack Targets U.S. Troops with Doxxing Threats in Bahrain

On Monday, U.S. service members stationed in Bahrain started getting WhatsApp messages on their personal phones telling them they were being watched and that missiles and drones were already aimed…

5 Stages of The Threat Intelligence Lifecycle SOCRadar

5 Stages of The Threat Intelligence Lifecycle

5-stages-of-the-threat-intelligence-lifecycle

Blue Origin Leak Claim, iOS Zero Day Sale, VPN and AWS Access Listings, and Ticketmaster Database Post SOCRadar

Blue Origin Leak Claim, iOS Zero Day Sale, VPN and AWS Access Listings, and Ticketmaster Database Post

SOCRadar Dark Web Team identified several new underground posts, including a claim of leaked Blue Origin documents tied to a ransom demand, a separate listing advertising an alleged full-chain iOS…

WormGPT: The Blueprint for Malicious AI SOCRadar

WormGPT: The Blueprint for Malicious AI

The story of WormGPT is about what happens when a proof-of-concept becomes a brand and is one of the first examples of how AI is used in cyberattacks. Origins and…

Bitwarden CLI Hijacked in npm Supply Chain Attack Linked to TeamPCP & Checkmarx Breach SOCRadar

Bitwarden CLI Hijacked in npm Supply Chain Attack Linked to TeamPCP & Checkmarx Breach

A malicious version of the Bitwarden CLI circulated on npm for roughly 90 minutes on April 22, 2026, silently stealing developer credentials, cloud secrets, and CI/CD tokens before exfiltrating them…

How OSINT is Used in Cybersecurity (Real-World Use Cases) SOCRadar

How OSINT is Used in Cybersecurity (Real-World Use Cases)

In 2018, investigators at Bellingcat unmasked 305 officers from Russia’s military intelligence unit, GRU Unit 26165, using nothing but a public vehicle registration database and a Moscow address. No classified…

How AI Changed Vishing: Case of PlugValley SOCRadar

How AI Changed Vishing: Case of PlugValley

Vishing or voice phishing is not a new attack. Fraudsters have been calling people and pretending to be banks, government agencies, and tech support for decades. What has changed is…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action