SOCRadar
Featured
n0n Ransomware: Inside an AI-Assisted Extortion Operation
SOCRadar analyzes an exposed n0n ransomware workspace: AI-built tooling, FortiGate credential stuffing, firewall sabotage and 23 compromised organizations…
Editor's picks.
Latest articles
SOCRadar
Pataya Food Leak, Belgian Military Data, China Housing Fund, Anka DDoS, and Vijay Sales Access
SOCRadar Dark Web Team identified several underground posts, including an alleged 500GB Pataya Food data leak, an alleged Belgian military archive containing more than 2,700 files, and an alleged Chinese…
SOCRadar
September 2026: FBI Breach, Clop Hijack & IDScan Leak
The major cyber attacks of September 2026 hit federal law enforcement, a rival cybercrime gang, and the companies that verify identities. ShinyHunters hijacked the Clop ransomware gang's Dark Web leak…
SOCRadar
Australia’s Annual Cyber Threat Report 2025-26 Shows Cyber Incidents Up 20%
Australia’s cyber security authority responded to 1,524 cyber security incidents in the 2025-26 financial year, a 20% increase from the previous year and a 36% rise over five years. The…
SOCRadar
PHP2Shell Weaponized After Japanese Real Estate Extortion
An exposed server ties an extortion wave on about 20 Japanese property sites to an operator who later weaponized PHP2Shell (CVE-2026-109618, CVE-2026-109619)…
SOCRadar
Wasmtime Sandbox Escape Flaws Patched in Cranelift
Two critical Wasmtime sandbox escape flaws, CVE-2026-115889 and CVE-2026-115893, let a crafted WebAssembly (Wasm) module push the Cranelift compiler into generating unsafe machine code. The Bytecode Alliance fixed both on…
SOCRadar
Node2Shell: Brotli Flaw Hits Python Packages
[Update] October 28, 2026: CISA Adds Node2Shell to KEV as Exploit Traffic Emerges [Update] October 27, 2026: PHP Ships Windows Builds With Brotli Fix The Node2Shell Brotli flaw (CVE-2026-111497), disclosed…
SOCRadar
Finaxis, WoWInstaller, Moodle, MyHairCare & HT Médica Leaks
SOCRadar Dark Web Team identified several underground posts, including an alleged Finaxis.cloud data sale involving 400GB of information, a resurfaced WoWInstaller database containing historical user credentials, and an alleged Argentine…
SOCRadar
CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access
CVE-2026-114625 is an actively exploited SQL injection flaw in VeloCloud Orchestrator that lets authenticated users gain superuser operator privileges…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action