Latest articles
SOCRadar
Tracking the U.S.-Israel-Iran War with OSINT Tools: A Practical Guide
When Operation Epic Fury launched on February 28, 2026, the fog of war hit the internet in real time. Airspace across the Gulf locked down, Iran’s internet connectivity collapsed to…
SOCRadar
FBI Seizes LeakBase Cybercrime Forum, Data of 142,000 Members
[Update] March 13, 2026: “Russia Seizes New LeakBase Domain Following Earlier Takedown” So, LeakBase. Here’s what most miss in the threat landscape: this wasn’t just another Dark Web forum takedown.…
SOCRadar
CVE-2026-22719: VMware Aria Operations Command Injection Added to CISA KEV
Broadcom previously disclosed and patched CVE-2026-22719, a command injection issue in VMware Aria Operations (formerly vRealize Operations) that can enable unauthenticated Remote Code Execution (RCE) under a specific operational condition.…
SOCRadar
Alleged Eholo, OptimizerAI, PlayStation, Florajet, Coinbase Data and MalFactory Stealer Sale Surface
SOCRadar’s Dark Web Team identified several new underground posts this week, including alleged data leak and sale claims involving Eholo, OptimizerAI, PlayStation, Florajet, and Coinbase, as well as a new…
SOCRadar
Denmark, Greenland, and Ukraine Under DDoS Assault: Weekly DDoS Threat Intelligence Analysis
Analysis Period: February 23 – March 1, 2026 Between February 23 and March 1, 2026, SOCRadar identified a sustained, coordinated DDoS campaign conducted by the pro-Russian threat actor NoName057(16) using…
SOCRadar
U.S. Elasticsearch Leak: 676M+ Identity Records & SSNs Exposed
SOCRadar has identified a publicly accessible Elasticsearch instance containing over 676 million indexed U.S. identity records, including full SSNs and complete identity profiles. The dataset was exposed to the internet…
SOCRadar
CVE-2026-0628: Chrome “Gemini Live” Side Panel Injection Bug
CVE-2026-0628 is a high-severity Google Chrome and Chromium vulnerability caused by insufficient policy enforcement in the tag. In practical terms, it can let a malicious browser extension inject script or…
SOCRadar
OpenClaw’s ClawJacked Vulnerability Explained, What Organizations Need to Know?
OpenClaw, along with its recent exploitation technique called ClawJacked, has raised concerns about how cloud-based development environments handle authentication and token exposure. Security researchers recently revealed that malicious websites could…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action