What's Out There About You on the Dark Web? Scan for Leaks Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access SOCRadar

CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access

CVE-2026-114625 is an actively exploited SQL injection flaw in VeloCloud Orchestrator that lets authenticated users gain superuser operator privileges…

PHP2Shell Exploit Tooling Found on Exposed Attacker Server SOCRadar

PHP2Shell Exploit Tooling Found on Exposed Attacker Server

SOCRadar Threat Intelligence Unit (STRU) researchers found PHP2Shell exploit tooling on an attacker-controlled server whose working directory was exposed…

Slug: litellm-supply-chain-attack-pypi-docker SOCRadar

New LiteLLM Supply Chain Attack Hits PyPI and Docker

A new LiteLLM supply chain attack has turned version 1.107.0, an official release of the popular open-source LLM gateway, into a credential stealer. On October 21, 2026, attackers used stolen…

eMudhra CA Key Compromise: Weak Keys, Risks and Fixes SOCRadar

eMudhra CA Key Compromise: Weak Keys, Risks and Fixes

The eMudhra CA key compromise is a certificate authority (CA) security incident in which eight intermediate certificates issued by eMudhra, an Indian digital trust provider, carried private keys that anyone…

PHP2Shell: CVE-2026-109618 & CVE-2026-109619 SOCRadar

PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Flaws, Affected Versions, and How to Fix Them

PHP2Shell: two critical PHP RCE flaws (CVSS 9.2). Affected and fixed versions, why workarounds fail, detection signals, and a free exposure checker.

30 Questions to Ask Before Buying an AI Pentesting Tool SOCRadar

30 Questions to Ask Before Buying an AI Pentesting Tool

"AI pentesting" now covers very different products. Some platforms plan and run attack chains on their own and return exploitation evidence for every finding. Others are vulnerability scanners with a…

Slug: japan-data-breaches-2026-october-surge SOCRadar

Japan Data Breaches 2026: Inside the October Surge

Japan is facing a dense wave of breach disclosures. Since late September, at least 20 major Japanese companies have reported breaches, including Times Car, Lawson, Yakiniku King, Sourcenext and Burger…

INC and The Gentlemen Ransomware: Exposed AI Infrastructure SOCRadar

INC and The Gentlemen Ransomware: Exposed AI Infrastructure

SOCRadar Threat Research Unit (STRU) has uncovered an AI-driven intrusion ecosystem run by affiliates of the INC Ransomware and The Gentlemen Ransomware…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action