Latest articles
SOCRadar
CVE-2026-38526 in Krayin CRM Enables RCE
CVE-2026-38526 is a critical authenticated remote code execution (RCE) vulnerability affecting Webkul Krayin CRM / Krayin Laravel CRM v2.2.x. The issue is in the admin-side TinyMCE media upload feature and…
SOCRadar
Maritime OSINT: Tracking Dark Ships & Shadow Fleets
Every day, thousands of oil tankers move through the world’s oceans. Most of them broadcast their position, their name, and their destination to anyone who wants to look. But some…
SOCRadar
Vercel Breach: Hacker Claims to Sell Stolen Data in Potential Global Supply Chain Attack
On April 19, 2026, Vercel, the cloud development platform behind Next.js and Turbopack, disclosed a security incident following a threat actor’s public claim to be selling stolen corporate data on…
SOCRadar
Vercel and Binance Data Claims, Israel Facebook Leak, FALKONc2 Sale, and Gmail Caller Recruitment
SOCRadar Dark Web Team identified several new underground posts, including an alleged Vercel access key and source code sale framed as a supply chain risk, and a separate listing claiming…
SOCRadar
Public Elasticsearch Servers Expose 9.8 Billion Credential Records Across Enterprise, Cloud, and AI Platforms
Misconfigured Elasticsearch servers continue to expose massive volumes of sensitive data. This time, SOCRadar’s AI-powered Sensitive Data Exposure Monitoring service identified three publicly accessible Elasticsearch instances containing more than 9.8…
SOCRadar
Nmap Commands Guide: Cheat Sheet & Reference
Nmap (Network Mapper) is a free, OSINT tool used to discover devices and services on a network. Security professionals, system administrators, and ethical hackers use it daily to map networks,…
SOCRadar
Iran War Cyber Threat Outlook: Conflict Phases and What Comes Next
Since the Iran War began on February 28, 2026, the conflict has moved through phases that most threat frameworks were not built to track. In cyberspace, SOCRadar tracked 1,357 incidents…
SOCRadar
BlueHammer, RedSun, and UnDefend: Three Windows Defender Zero-Days Exploited in the Wild
[Update] July 3, 2026: CISA Flags BlueHammer as Exploited in Ransomware Campaigns Three Windows Defender vulnerabilities disclosed as zero-days in April 2026 are now being actively exploited: BlueHammer, RedSun, and…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action