CVE-2025-48595: June 2026 Android Security Update Fixes Framework Zero...
CVE-2025-48595: June 2026 Android Security Update Fixes Framework Zero-Day Google’s June 2026 Android Security Bulletin includes a fix for an Android Framework elevation of privilege zero-day tracked ...
Top 10 Cyber Threat Actors Targeting Brazil
Top 10 Cyber Threat Actors Targeting Brazil Brazil enters the second half of 2026 as Latin America’s undisputed top cybercrime target. With a general election approaching in October 2026 and a booming...
Top Supply Chain Risks in 2026 and Management Strategies
Top Supply Chain Risks in 2026 and Management Strategies Supply chains in 2026 are more connected, digital, and exposed than ever. Organizations now depend on software vendors, SaaS platforms, cloud p...
Dark Web Profile: BlindEagle
Dark Web Profile: BlindEagle BlindEagle (APT-C-36 / AguilaCiega / TAG-144 / G0099 / APT-Q-98) is a threat actor believed to be operating from Latin America. Tracked since 2018, the group runs a hybrid...
Italian Hospitality and AT&T Data Claims, Hinge Dump Sale, Meta Llama ...
Italian Hospitality and AT&T Data Claims, Hinge Dump Sale, Meta Llama Leak, and MobiFriend Dataset SOCRadar’s Dark Web Team identified several new underground posts, including an alleged 230,000-c...
Top 10 Identity Attack Techniques Used by Hackers
Top 10 Identity Attack Techniques Used by Hackers Most cyberattacks today start with a compromised identity. Stolen passwords, hijacked sessions, forged authentication tokens, and bypassed MFA are now...
Charter Data Breach: ShinyHunters Claims 42 Million Records Stolen on ...
Charter Data Breach: ShinyHunters Claims 42 Million Records Stolen on the Dark Web Charter Communications, the U.S. telecommunications company behind the Spectrum brand, has confirmed a cybersecurity ...
April 2026: ShinyHunters Hits Medtronic and ADT as North Korean Hacker...
April 2026: ShinyHunters Hits Medtronic and ADT as North Korean Hackers Drain DeFi Protocols April 2026 delivered a concentrated wave of high-impact incidents across healthcare, financial services, co...
WhatsApp 3B Dump, OnlyFans 340M Records Sale, BlockFi Email Leak, Rame...
WhatsApp 3B Dump, OnlyFans 340M Records Sale, BlockFi Email Leak, Ramen Kuroda Data Leak, and VSP Security Wholesale Breach SOCRadar Dark Web Team detected several new underground posts this week, inc...
TrapDoor: Malicious npm, PyPI, Crates.io Packages Target Developer Sec...
TrapDoor: Malicious npm, PyPI, Crates.io Packages Target Developer Secrets & AI Tooling Researchers identified a coordinated supply chain malware campaign named TrapDoor, involving waves of malici...
Dark Web Profile: CoinbaseCartel
Dark Web Profile: CoinbaseCartel CoinbaseCartel is a financially motivated threat actor that emerged on the Dark Web in September 2025. Unlike traditional ransomware groups, the group does not encrypt...
CVE-2026-20223: Cisco Secure Workload Auth Bypass Grants Site Admin Ac...
CVE-2026-20223: Cisco Secure Workload Auth Bypass Grants Site Admin Access Cisco has patched a maximum-severity vulnerability in Cisco Secure Workload (CSW) Cluster Software tracked as CVE-2026-20223....
How Dark Data Leaves Security Teams One Step Behind
How Dark Data Leaves Security Teams One Step Behind Cyber Threat Intelligence has come a long way. In the past, real-time threat feeds, dark web monitoring, and indicator-sharing platforms were reserv...
CVE-2024-12802: SonicWall SSL-VPN MFA Bypass Persists on Gen6
CVE-2024-12802: SonicWall SSL-VPN MFA Bypass Persists on Gen6 CVE-2024-12802 is an authentication bypass that can result in an SSL-VPN MFA bypass affecting SonicWall SonicOS / SonicWall SSL-VPN when t...
Verizon 2026 DBIR: 10 Takeaways You Should Know
Verizon 2026 DBIR: 10 Takeaways You Should Know Verizon’s 2026 Data Breach Investigations Report (DBIR) analyzes more than 31,000 security incidents and 22,000 confirmed breaches across organizations ...
TeamPCP GitHub Breach: Internal GitHub Repositories Allegedly Accessed
TeamPCP GitHub Breach: Internal GitHub Repositories Allegedly Accessed TeamPCP is back in the headlines, and this time the target is not a plugin, a CI/CD pipeline, or an open-source package. The grou...
B1ack's Stash Releases 4.6 Million Stolen Credit Cards for Free
B1ack’s Stash Releases 4.6 Million Stolen Credit Cards for Free A notorious Dark Web carding marketplace is making headlines again. B1ack’s Stash, one of the most active illicit card shops on the Dark...
EDR Terminator Sale, Alleged Adobe Business Leak, Serbia MUP Data Offe...
EDR Terminator Sale, Alleged Adobe Business Leak, Serbia MUP Data Offer, and Argentina BCRA IOMA GDEBA Claims SOCRadar Dark Web Team identified several new underground posts, including a listing adver...
Inside The Gentlemen Ransomware Leak: When the Hunter Becomes the Hunt...
Inside The Gentlemen Ransomware Leak: When the Hunter Becomes the Hunted Ransomware groups spend their days breaking into networks, stealing data, and pressuring victims into paying. They rarely find ...
CVE-2026-20182: Cisco Catalyst SD-WAN Auth Bypass Added to CISA KEV
CVE-2026-20182: Cisco Catalyst SD-WAN Auth Bypass Added to CISA KEV Cisco has disclosed CVE-2026-20182, a critical authentication bypass affecting Cisco Catalyst SD-WAN Controller (formerly vSmart) an...