SOCRadar’s Dark Web Team identified several new underground posts this week, including an alleged Discord zero-day RCE exploit sale, a claimed source code leak of the NOXIPOM ULTIMATE ransomware tool, ...

Full technical details, indicators of compromise, and attribution evidence are published in SOCRadar’s second FortiBleed whitepaper. Click here to read. Following the initial disclosure, STRU ...

Ransomware attack on Merrimack County, attributed to Booba. Domain, industry, country, and victim status tracked in real time.

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an ...

For comprehensive, real-time DDoS threat intelligence covering ongoing campaigns across Europe, explore SOCRadar’s free DDoS intelligence dashboard where we continuously analyze and showcase ...

Palo Alto Networks disclosed CVE-2026-0300, a critical pre-authentication buffer overflow in the User-ID™ Authentication Portal (Captive Portal) service in PAN-OS. Under the right exposure conditions, ...

Ransomware attack on seven seas group, attributed to Spirals. Domain, industry, country, and victim status tracked in real time.

[Update] April 1, 2026: “Has Anthropic Confirmed the Cause of the Claude Code Exposure?”, “Claude Code Leak Sparks Typosquatting Attempts” On March 31, 2026, community reports drew attention to a ...

Ransomware attack on Nourison, attributed to Global Secret Group. Domain, industry, country, and victim status tracked in real time.

Indicators are what attackers leave behind. Stolen credentials are what they arrive with. Check Your Exposure Reports /Linux Kernel Out-of-Bounds Write Flaw Enables Local Privilege Escalation to Root ...

A malicious version of the Bitwarden CLI circulated on npm for roughly 90 minutes on April 22, 2026, silently stealing developer credentials, cloud secrets, and CI/CD tokens before exfiltrating them ...

Get your free weekly report by email.