Get your free weekly report by email.

Get your free weekly report by email.

SOCRadar’s Threat Research Unit (STRU) has documented CyberXero, a Russian-speaking, financially motivated Initial Access Broker that pairs commodity offensive tooling with an AI orchestration layer ...

In late April 2026, Army General Joshua Rudd, the head of U.S. Cyber Command and the NSA, testified before the Senate Armed Services Committee that foreign adversaries would likely attempt to ...

CVE-2026-85706 represents a severe path traversal flaw in GitLab CE and EE, permitting unauthenticated remote actors to retrieve arbitrary files from affected self-managed deployments. Following ...

Threat intelligence report with 33 extracted IOCs, MITRE ATT&CK mapping, and hunting context. Free by SOCRadar.

Absence from a leak site is not proof a victim paid. An organization also may not be listed because a negotiation is still open, a partial settlement was reached, or for reasons unrelated to payment ...

Vortex Market describes itself as a “classic wallet escrow market,” and that self-description is accurate. It is a general-purpose Dark Web marketplace built around anonymous trade, vendor reputation ...

Broadcom has released a new VMware advisory, VMSA-2026-0006, addressing five vulnerabilities in VMware vCenter, ESX, Workstation, Fusion, and related VMware Cloud Foundation, vSphere Foundation, and ...

CVE-2025-66376 is a stored cross-site scripting vulnerability in the Classic UI of Zimbra Collaboration Suite, creating a path to mailbox theft and abuse of the user’s authenticated webmail session.

Emerging from an increasingly crowded and combative ransomware ecosystem, Krybit Ransomware operates as a financially motivated, opportunistic Ransomware-as-a-Service (RaaS) threat. Within weeks of ...

A threat actor using the handle 888 has claimed to be selling around 35GB of Accenture-related data on a cybercrime forum, making the latest Accenture breach claim a case worth monitoring. The alleged ...