SOSEC Radar

Real-time security intelligence, malware research, vulnerability tracking, and blockchain incident analysis - all in one place.

Curated Reports 50

50 public sources

High-impact Research 41

41 high-impact reports

Malware Families 2

2 source research

Tracked CVEs 37

37 vendor-backed

Blockchain Incidents 4

4 on-chain research

Latest report

A warm-paper investigative workbench where 153 small control cards flow from three foundation ledgers through evidence gates, clocks, negative-test tools, and an operating security shield

Research

Implementing All 153 CIS Controls v8.1 Safeguards: 13,020 PRD Requirements, Boundaries, and Proof (July 2026)

A field guide and machine-readable implementation register for all 153 CIS Controls v8.1 Safeguards. Each Safeguard carries 72–108 atomic requirements across twelve product and operating dimensions, plus exact populations, owners, control points, evidence, negative tests, exception expiry, platform boundaries, dependency-first rollout, and forty reproducible CAS findings.

Read the report

Recently published

On a black-and-gold warm-paper investigation desk, many observation streams pass through mirrors, clocks, a magnifier, and a policy gate before reaching a blocking shield, an observation queue, or quarantine

Informational Choosing Open IP Threat Intelligence—The Best Stack for July 2026 and Its Measured Cut Line Research July 25, 2026

A warm-paper investigative workbench where a blue program capsule passes through four mechanical protection layers and measuring instruments, reaches a local decision lever, and ends at a blue vault behind a wall.

Info How to Protect a Go Program in 2026 — Recommended Stack, Measured Results, and Architecture Limits Research July 24, 2026

A warm hand-drawn forensic workbench places a sealed software package under a magnifying glass between a restrained AI terminal, source and dependency evidence, guarded network and process boundaries, and a cabinet of powerful security instruments.

High Before the Model Gets a Debugger, We Audited jshookmcp's Source, Release Chain, and Backdoor Risk Vulnerability Research Jul 24, 2026

Warm-paper investigative illustration: a red path leaves a controlled exploit arena through a package-cache gateway and several server steps, crosses an organizational boundary, and reaches a data warehouse under blue-green detection lights.

Critical OpenAI’s Cybersecurity Evaluation Crossed into Hugging Face Production Vulnerabilities July 23, 2026

A warm hand-drawn investigation scene connects a JSON label, nested jar container, loopback resource parcel, and class-loading gate to show the conditional path formed by Fastjson @JSONType probing and Spring Boot fat-jar loading on Temurin 8u492.

Critical When Class Bytes Vouch for Themselves: Fastjson @JSONType, Spring Boot Loader, and JDK 8 Class Initialization Vulnerability Research Jul 20, 2026

A warm hand-drawn comparison shows NGINX measuring a blue string into a wooden tray, then a later copy stretching beyond that tray after map state changes; a red mark identifies the crossed boundary.

Critical NGINX Measured the String, Then the Value Changed — The Two-Pass Failure Behind CVE-2026-42533 Vulnerability Research July 20, 2026

On beige paper, a sealed envelope splits into two mechanical lines: an upper line passes a key and a locked door with a cloud-shaped side tube, while a lower line passes a blue booklet, integer beads, a stone arch, and a cylinder before both lines end in gray fog.

Critical Emergency WordPress 6.8–7.0 Updates: Both CVEs Are in KEV, and Public wp2shell Evidence Reaches SQLi Vulnerability Research Jul 19, 2026

Hand-drawn technical cover: a blue RDP cable enters a nighttime reception desk where a small front cabinet is neatly prepared, while a vast dark room behind it still carries dust and ghostly traces from prior occupants as an engineer inspects it by lamp.

Critical The RDP Room That Was Never Cleared — Reconstructing CVE-2026-56190 Vulnerability Research Jul 17, 2026

View all reports