soc

Alleged Okta Leak, MTS Bank Data Sale, Naucalpan, SSH Access, and Flawireless Claims SOCRadar Dark Web Team identified several new underground posts involving alleged database leaks and access sales. The activity includes an alleged SQL database leak tied to Naucalpan de Juarez services in Mexico, an alleged 3.29 million-record Okta dataset, and an alleged 1 […]

Top 10 MSSPs in Brazil in 2026 Brazil’s cybersecurity market is growing fast, from an estimated USD 3.68 billion in 2025 toward USD 6.57 billion by 2031, driven by surging cyber threats, rapid digital transformation, and the enforcement of the Lei Geral de Proteção de Dados (LGPD). For organizations operating in Brazil, selecting a Managed […]

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.   CVE-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks […]

What Is Attack Surface Management (ASM)? Attack Surface Management (ASM) is the continuous discovery, monitoring, and prioritization of an organization’s exposed digital assets, including cloud infrastructure, SaaS applications, internet-facing systems, identities, and third-party integrations. The goal is to identify and reduce vulnerabilities before attackers can exploit them. Modern environments change faster than traditional security processes […]

Klue Breach: What You Need to Know The Klue breach shows how stolen OAuth tokens from a trusted SaaS integration can expose Salesforce CRM data. Learn what happened, which companies confirmed impact, what data was exposed, and how defenders should respond. What Happened in the Klue Breach? The Klue breach was a third-party Software-as-a-Service (SaaS) […]

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.   CVE-2025-67038 Lantronix EDS5000 Code Injection Vulnerability CVE-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability CVE-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability CVE-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability These types of vulnerabilities are frequent […]

WhatsApp VBScript Campaign Installs ManageEngine Endpoint Central for Persistent Remote Access A newly reported malware campaign uses WhatsApp direct messages to deliver VBScript (VBS/VBE) attachments that look like routine business documents. If a recipient downloads and then opens the attachment in WhatsApp Desktop or WhatsApp Web, the script starts a staged infection chain that ends […]

Top Dark Web Telegram Groups & Channels 2026 Note: This article is intended for cybersecurity awareness and research purposes only. It does not promote or endorse illegal content. The top Dark Web Telegram channels and groups monitored in 2026 are CTI Now, NoName057(16), RipperSec, Observer Cloud, Omega Cloud, Data Leak Monitoring, BidenCash Shop, EMP/mailpass/sqli Chat, […]

Top Dark Web Marketplaces in 2026 Dark Web marketplaces in 2026 are underground platforms where cybercriminals buy and sell stolen data, credentials, stealer logs, payment card records, malware, fraud services, counterfeit documents, drugs, and access to compromised systems. Also known as Dark Web markets or darknet markets, these platforms are increasingly specialized, with some operating […]

Alleged FortiBleed Access Auction, Sens Unique Paris Data Sale, and libsodium DoS Claims SOCRadar Dark Web Team identified new underground activity involving alleged FortiBleed-related access, an alleged 529,892-record customer database linked to French retailer Sens Unique Paris, and a claimed libsodium and NaCl zero-day package. Additional listings advertised alleged KodexGlobal portal access, a 2 million-card […]