Latest articles
SOCRadar
Berkeley University, Eni France, and Foremost Named in Dark Web Sales; SDC Service Advertised
New activity observed by the SOCRadar Dark Web team reveals an expanding ecosystem of cybercrime services and data leaks targeting high-profile entities. A newly advertised cash-out platform called SDC Ecosystem…
SOCRadar
Critical OAuth2-Proxy Vulnerability (CVE-2025-54576) Lets Attackers Bypass Authentication
A security flaw has been found in OAuth2-Proxy, a tool that helps secure web applications using OAuth2 or OIDC authentication. Tracked as CVE-2025-54576, this vulnerability has been given a CVSS…
SOCRadar
Dark Web Profile: SafePay Ransomware
SafePay is a ransomware group first observed around September 2024. It encrypts files and demands a cryptocurrency payment to restore access. The group behind it also steals data from victims…
SOCRadar
Major Cyber Attacks Targeting Aviation Industry 2025
In 2025, the aviation industry remained a key target for cyberattacks. Its role as critical infrastructure makes it a prime focus for threat actors. Airlines and airports rely heavily on…
SOCRadar
Top 10 MCP (Model Context Protocol) Server Security Risks
Model Context Protocol (MCP) has quickly become a key enabler for AI agents, allowing them to interact with tools, APIs, and workflows in a standardized way. Think of MCP as…
SOCRadar
Dark Web Activity Targets MEXC Global, Pandora Joias, Tea App, and Expands Smoke Loader Reach
SOCRadar Dark Web Team has observed several high-impact cybercrime developments over the past week. Threat actors are offering unauthorized fund withdrawal services for MEXC Global accounts, claiming they can bypass…
SOCRadar
June 2025: Qantas, 23andMe, Zoomcar, and Coinbase Breaches Lead Impact
June 2025 witnessed a wave of impactful cyber incidents spanning government agencies, critical infrastructure, healthcare, and major enterprises. From ransomware attacks and insider-driven data leaks to dark web re-uploads of…
SOCRadar
Critical SonicWall SMA Vulnerability CVE-2025-40599: What You Need to Know
SonicWall has disclosed a critical vulnerability in its SMA 100 series remote access devices, tracked as CVE-2025-40599. This issue carries significant risk, particularly for organizations relying on these systems for…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action