Latest articles
SOCRadar
September 2025 Patch Tuesday: 2 Zero-Days (CVE-2025-55234 & CVE-2024-21907), 81 Microsoft Flaws
Microsoft has released its September 2025 Patch Tuesday updates, addressing 81 vulnerabilities across its ecosystem, eight of which are rated critical. Two zero-day vulnerabilities have also been highlighted this month…
SOCRadar
Massive npm Supply Chain Attack Exposes Millions to Crypto-Stealing Malware
Yesterday, researchers issued a warning about a major npm supply chain attack that has disrupted the JavaScript ecosystem. Attackers compromised widely used packages such as chalk, debug, and ansi-styles, injecting…
SOCRadar
Dark Web Profile: Mr Hamza
Hacktivist groups like Mr Hamza have turned Telegram into a staging ground for cyber campaigns. These channels serve as meeting points where supporters coordinate Distributed Denial of Service (DDoS) attacks,…
SOCRadar
iOS 0-Day, 55M U.S. Citizens’ Data, and Stealer Tools Hit Dark Web Forums
SOCRadar’s Dark Web Team has uncovered a surge in underground listings offering sensitive data, powerful exploit tools, and persistent access channels. Threat actors are advertising a zero-day RCE exploit targeting…
SOCRadar
CVE-2025-53690: Sitecore Deployments Targeted via WEEPSTEEL Malware
Organizations running older Sitecore deployments are now in the crosshairs of attackers exploiting a newly disclosed security issue, tracked as CVE-2025-53690. What makes this case especially concerning is that it…
SOCRadar
LockBit 5.0 & Ransomware Cartel: What You Need To Know?
[Update] December 8, 2025: “LockBit 5.0 “Secure Blog” Infrastructure Already Exposed” LockBit represents one of the longest-running and most structured ransomware gangs of recent years, with a Ransomware-as-a-Service (RaaS) model…
SOCRadar
Dark Web Profile: GLOBAL Ransomware
GLOBAL Ransomware, also known as the GLOBAL GROUP, is a newly branded Ransomware-as-a-Service (RaaS) operation that surfaced in mid-2025. Despite being presented as a new player, forensic evidence links GLOBAL…
SOCRadar
Salesloft Drift Breach: Everything You Need to Know
[Update] September 8, 2025: “Salesloft’s Official Update: GitHub Breach Led to Drift Token Theft” In August 2025, Salesloft’s Drift chatbot service became the conduit for one of the largest SaaS…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action