What's Out There About You on the Dark Web? Scan for Leaks Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

Top 10 Ransomware Groups of 2025 SOCRadar

Top 10 Ransomware Groups of 2025

The Top 10 Ransomware Groups of 2025 illustrate how the ransomware ecosystem changed in structure rather than simply growing in volume. After the disruption of dominant groups in 2024, the…

CVE-2025-68668: Arbitrary Command Execution in n8n Python Code Node SOCRadar

CVE-2025-68668: Arbitrary Command Execution in n8n Python Code Node

A newly disclosed security issue in n8n, tracked as CVE-2025-68668, has drawn attention from security teams because of its severity and potential impact. The vulnerability affects a core feature used…

Germany Faces Intense New Year DDoS Campaign: Weekly DDoS Threat Intelligence Analysis SOCRadar

Germany Faces Intense New Year DDoS Campaign: Weekly DDoS Threat Intelligence Analysis

Analysis Period: December 29, 2025 – January 4, 2026 Between 29 December 2025 and 4 January 2026, SOCRadar identified an intensive coordinated DDoS campaign conducted by the pro-Russian threat actor…

NordVPN Dev Data Leak, Crow Stealer Tool & Large Data Listings SOCRadar

NordVPN Dev Data Leak, Crow Stealer Tool & Large Data Listings

SOCRadar’s Dark Web Team identified several new underground posts this week, including a threat actor claim involving alleged internal NordVPN development data, a large data sale attributed to AgroParisTech, and…

IBM API Connect Exposed to Critical Auth Bypass (CVE-2025-13915) SOCRadar

IBM API Connect Exposed to Critical Auth Bypass (CVE-2025-13915)

A recent security vulnerability, tracked as CVE-2025-13915, affects IBM API Connect, an end-to-end API platform used to create, test, manage, and secure APIs. Identified during internal testing by IBM, the…

MongoBleed (CVE-2025-14847): What MongoDB Users Need to Know About This Memory Leak SOCRadar

MongoBleed (CVE-2025-14847): What MongoDB Users Need to Know About This Memory Leak

A recently disclosed security vulnerability named MongoBleed has drawn attention across the cybersecurity community due to its scale and ease of exploitation. Tracked as CVE-2025-14847, the flaw affects a wide…

Cyberattacks Targeting International Domains: Weekly DDoS Threat Intelligence Analysis SOCRadar

Cyberattacks Targeting International Domains: Weekly DDoS Threat Intelligence Analysis

Analysis Period: December 22–28, 2025 Between 22 and 28 December 2025, SOCRadar identified an extensive coordinated DDoS campaign conducted by the pro-Russian threat actor NoName057(16) and their project DDoSia. The…

Banco Vimenca, WIRED, and Government Data Leaks Surface on Dark Web SOCRadar

Banco Vimenca, WIRED, and Government Data Leaks Surface on Dark Web

SOCRadar’s Dark Web Team identified several high-profile data leak claims this week, including alleged exposures affecting Banco Vimenca, WIRED subscribers, Mexico’s Tax Administration Service (SAT), and New Zealand-based social platform…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action