What's Out There About You on the Dark Web? Scan for Leaks Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

CVE-2026-1731: RCE Risk in BeyondTrust RS and PRA SOCRadar

CVE-2026-1731: RCE Risk in BeyondTrust RS and PRA

BeyondTrust has disclosed CVE-2026-1731, a vulnerability that enables Remote Code Execution (RCE) in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA). Early reporting indicates that a meaningful number of…

Alleged Suno Data, Card Dump, ASUS Records & Air France Access Sale SOCRadar

Alleged Suno Data, Card Dump, ASUS Records & Air France Access Sale

SOCRadar’s Dark Web Team identified several new underground listings this week, including an alleged database and source code sale linked to AI music platform Suno, a large aggregated credit card…

How Third-Party Risk Management Turns Vendor Exposure Into Actionable Defense SOCRadar

How Third-Party Risk Management Turns Vendor Exposure Into Actionable Defense

In modern environments, third-party risk management failures are often the entry point attackers rely on. Compromise usually starts quietly in someone else’s environment, long before any impact is visible internally.…

Italy and Germany Under DDoS Assault: Weekly DDoS Threat Intelligence Analysis SOCRadar

Italy and Germany Under DDoS Assault: Weekly DDoS Threat Intelligence Analysis

Analysis Period: February 2–8, 2026 Between February 2 and 8, 2026, SOCRadar identified an extensive coordinated DDoS campaign conducted by the pro-Russian threat actor NoName057(16) using their DDoSia attack tool.…

CVE-2026-25049: n8n Expression Sandbox Escape Enables RCE SOCRadar

CVE-2026-25049: n8n Expression Sandbox Escape Enables RCE

n8n is widely used to automate business workflows, which also means it often sits close to credentials, internal APIs, and sensitive data. A newly patched vulnerability, CVE-2026-25049, shows how risky…

Dark Web Profile: 0APT Ransomware SOCRadar

Dark Web Profile: 0APT Ransomware

0APT, also recognized as the 0APT Syndicate, is a controversial Ransomware-as-a-Service operation that surfaced in late January 2026. The group rapidly gained notoriety by listing hundreds of high-profile victims on…

CVE-2025-11953 (Metro4Shell) in React Native Metro Server Enables RCE SOCRadar

CVE-2025-11953 (Metro4Shell) in React Native Metro Server Enables RCE

A critical security flaw in the React Native Community CLI Metro development server has drawn attention following confirmed real-world exploitation in late December 2025 and January 2026, alongside the public…

Multi-Country DDoS Campaign: Weekly DDoS Threat Intelligence Analysis SOCRadar

Multi-Country DDoS Campaign: Weekly DDoS Threat Intelligence Analysis

Analysis Period: January 26 – February 1, 2026 Between January 26 and February 1, 2026, SOCRadar identified an extensive coordinated DDoS campaign conducted by the pro-Russian threat actor NoName057(16) using…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action