What's Out There About You on the Dark Web? Scan for Leaks Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

XaocMail ClickFix Campaign Drops Phantom53 and HavoX Across Latin America, Asia, and Europe SOCRadar Featured
Cyber Threat Intelligence

XaocMail ClickFix Campaign Drops Phantom53 and HavoX Across Latin America, Asia, and Europe

Threat actors continue to refine and scale their operations, increasingly integrating artificial intelligence to harden attack infrastructure and accelerate deployment. The SOCRadar Threat Research Unit (STRU) recently identified a multi-stage campaign operated by a Russian-speaking threat actor wielding an AI-assisted toolkit. The adversary’s pipeline chains…

SOCRadar Threat Research Unit (STRU) · · 28 min read

Editor's picks.

Latest articles

CVE-2026-119618: Apache HTTP/2 Race Condition RCE SOCRadar

CVE-2026-119618: Apache HTTP/2 Race Condition RCE

The Apache Software Foundation has released Apache HTTP Server 2.4.71 to fix CVE-2026-119618, a critical race…

FaceStealer: FBI Disrupts Fake Video Call Crypto Scam SOCRadar

FaceStealer: FBI Disrupts Fake Video Call Crypto Scam

The FBI and the U.S. Department of Justice have disrupted FaceStealer, a North Korean social engineering campaign that used hijacked accounts, replayed webcam footage and fake video calls to steal…

Dark Web Profile: n0n Ransomware SOCRadar

Dark Web Profile: n0n Ransomware

n0n is a data-exfiltration and destructive-extortion group that surfaced on the Dark Web in September 2026 and scaled to 93 listed victims within roughly five weeks. Its operators exfiltrate data,…

SOCRadar Featured in Microsoft’s Ignite 2026 Sentinel Connectors SOCRadar

SOCRadar Featured in Microsoft’s Ignite 2026 Sentinel Connectors

Microsoft has published its Microsoft Ignite 2026 announcement of new and enhanced Microsoft Sentinel connectors, and SOCRadar is part of it. The post features the SOCRadar Alerts Azure Sentinel Directional…

SOCRadar MCP: 126 Tools and the New MSSP MCP Server SOCRadar

SOCRadar MCP: 126 Tools and the New MSSP MCP Server

Security analysts already ask AI assistants to summarize CVEs, draft reports and explain unfamiliar techniques. Ask the same assistant which of your domains were impersonated this week, and it can…

CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day SOCRadar

CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day

Google has patched CVE-2026-125350, a high-severity use-after-free in Chrome's XML handling that attackers are already exploiting. The fix landed in the Stable channel on November 9, 2026, three days after…

October 2026: Binance Heist, ConnectWise Breach, and More SOCRadar

October 2026: Binance Heist, ConnectWise Breach, and More

The major cyber attacks of October 2026 were some of the year's most consequential, and many of them started with access their victims already trusted. A cryptocurrency exchange lost billions…

November 2026 Patch Tuesday: 1,094 Flaws, One Exploited SOCRadar

November 2026 Patch Tuesday: 1,094 Flaws, One Exploited

Microsoft's November 2026 Patch Tuesday, released on November 10, 2026, fixes 1,094 vulnerabilities across Windows, Office, SQL Server, Exchange Server, SharePoint, Azure services, and developer tools. The total falls below…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action