SOCRadar’s Threat Research Unit (STRU) has documented CyberXero, a Russian-speaking, financially motivated Initial Access Broker that pairs commodity offensive tooling with an AI orchestration layer ...
On October 6, 2026, the FBI and the U.S. Secret Service published a joint Cybersecurity Advisory on FortiBleed, the active global credential compromise campaign against internet-facing Fortinet ...
In late April 2026, Army General Joshua Rudd, the head of U.S. Cyber Command and the NSA, testified before the Senate Armed Services Committee that foreign adversaries would likely attempt to ...
Palo Alto Networks disclosed CVE-2026-0300, a critical pre-authentication buffer overflow in the User-ID™ Authentication Portal (Captive Portal) service in PAN-OS. Under the right exposure conditions, ...
[Update] April 1, 2026: “Has Anthropic Confirmed the Cause of the Claude Code Exposure?”, “Claude Code Leak Sparks Typosquatting Attempts” On March 31, 2026, community reports drew attention to a ...
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an ...
Indicators are what attackers leave behind. Stolen credentials are what they arrive with. Check Your Exposure Reports /Linux Kernel Out-of-Bounds Write Flaw Enables Local Privilege Escalation to Root ...
Get your free weekly report by email.
Find compromised credentials, vulnerable assets, and dark web leaks in seconds. Free threat intelligence tools used by 10,000+ security teams worldwide.
Full technical details, indicators of compromise, and attribution evidence are published in SOCRadar’s second FortiBleed whitepaper. Click here to read. Following the initial disclosure, STRU ...
A malicious version of the Bitwarden CLI circulated on npm for roughly 90 minutes on April 22, 2026, silently stealing developer credentials, cloud secrets, and CI/CD tokens before exfiltrating them ...
Broadcom previously disclosed and patched CVE-2026-22719, a command injection issue in VMware Aria Operations (formerly vRealize Operations) that can enable unauthenticated Remote Code Execution (RCE) ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results