SOCRadar’s Dark Web Team identified several new underground posts this week, including an alleged Discord zero-day RCE exploit sale, a claimed source code leak of the NOXIPOM ULTIMATE ransomware tool, ...

Since the Iran War began on February 28, 2026, the conflict has moved through phases that most threat frameworks were not built to track. In cyberspace, SOCRadar tracked 1,357 incidents prominent in ...

Fortinet has confirmed that CVE-2026-104286, a critical path traversal flaw in FortiMail, is being exploited in zero-day attacks, and CISA added it to the Known Exploited Vulnerabilities (KEV) catalog ...

Full technical details, indicators of compromise, and attribution evidence are published in SOCRadar’s second FortiBleed whitepaper. Click here to read. Following the initial disclosure, STRU ...

A cyberattack spanning nine Mexican government organizations has become one of the clearest examples yet of how commercial AI can accelerate a cyberattack. In this case, Claude Code and ChatGPT helped ...

System Intrusion has tightened its grip at the top, now accounting for 61% of all breaches, reflecting the dominance of ransomware-driven, multi-step attack campaigns. Meanwhile, Basic Web Application ...

Supply chain attacks enable a single compromise to impact multiple organizations simultaneously, making them among the most damaging threats in 2025 and beyond. According to industry data, breaches ...

Ivanti has patched CVE-2026-6973, a high-severity remote code execution (RCE) vulnerability affecting Ivanti Endpoint Manager Mobile (EPMM) on-prem deployments. The vulnerability has been exploited in ...

New analysis published in August 2026 has overturned the original timeline of the LiteLLM supply chain attack. The well-known 40-minute PyPI window was not the beginning of the exposure. It was the ...

CVE-2026-23918 is a vulnerability in Apache HTTP Server (httpd) that affects its HTTP/2 implementation and can lead to a double free during an HTTP/2 stream “early reset” condition. Apache describes ...

[Update] April 1, 2026: “Has Anthropic Confirmed the Cause of the Claude Code Exposure?”, “Claude Code Leak Sparks Typosquatting Attempts” On March 31, 2026, community reports drew attention to a ...

Security updates released for WordPress address CVE-2026-87902, a severe unauthenticated path traversal flaw within its page-template resolution mechanism. The weakness allows the CMS to load ...