Latest articles
SOCRadar
Alleged TrakCare Access, PowerLab Leak, U.S. Driver IDs, Hong Kong HA Data and More
SOCRadar’s Dark Web Team identified several new underground posts this week, including an alleged unauthorized access offering tied to TrakCare and InterSystems environments, a small French retailer database leak claim,…
SOCRadar
Pro-Iran Cyberattacks on Financial Services: 144 Incidents
Financial services is the #2 most targeted sector in the entire campaign, and for reasons that are deliberate, documented, and rooted in more than a decade of Iranian cyber doctrine.…
SOCRadar
CVE-2026-35616: FortiClient EMS API Auth Bypass Enables Command Execution
Fortinet disclosed a critical vulnerability in Fortinet FortiClient EMS (Enterprise Management Server) tracked as CVE-2026-35616. Fortinet also says it has observed in-the-wild exploitation and released out-of-band hotfix guidance for affected…
SOCRadar
Progress ShareFile Flaws CVE-2026-2699 & CVE-2026-2701 RCE
A newly disclosed Progress ShareFile pre-auth RCE chain is drawing attention after researchers showed how CVE-2026-2699 and CVE-2026-2701 can be combined to compromise exposed Storage Zones Controller 5.x servers. The…
SOCRadar
CVE-2026-20093: Critical Cisco IMC Flaw Allows Unauthenticated Admin Access to UCS Servers
CVE-2026-20093, is an authentication bypass flaw found in the change password functionality of Cisco Integrated Management Controller (IMC). It could allow an unauthenticated, remote attacker to bypass authentication mechanisms and…
SOCRadar
CVE-2026-5281: Chrome WebGPU Zero-Day Exploited In The Wild
Google patched CVE-2026-5281, a high-severity use-after-free (CWE-416) vulnerability in Dawn, Chromium’s WebGPU implementation. The company has confirmed exploitation in the wild, and CISA added it to the Known Exploited Vulnerabilities…
SOCRadar
BLACKNET-00: The Ransomware-as-a-Service Platform That Weaponizes Mediocrity
How a Custom Ransomware Builder Collapses the Technical Barrier Between Script Kiddies and Enterprise-Grade Ransomware Operations Executive Summary A threat actor named Infrastructure Destruction Squad announced BLACKNET-00 via Telegram, a…
SOCRadar
Trivy-Linked Cisco Breach & ShinyHunters’ Stolen Data Claim
Cisco is facing fresh scrutiny after a breach of its internal development environment was linked to the Trivy supply chain compromise. A ShinyHunters extortion claim has since surfaced, alleging theft of Salesforce…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action