Latest articles
SOCRadar
CVE-2026-109469: CVSS 10 Entra Device Registration Flaw
Microsoft has disclosed CVE-2026-109469, a critical elevation of privilege vulnerability in Entra Device Registration, the cloud service that registers and joins devices to Microsoft Entra ID. The flaw carries a…
SOCRadar
Dark Web Profile: CyberXero
CyberXero is a Russian-speaking, financially motivated Initial Access Broker (IAB) active on Dark Web forums, including Dread and HackForums. The actor runs two parallel operations: an opportunistic global campaign that…
SOCRadar
Critical Infrastructure Under Siege, From Freezers to Wider OT
[Update] November 10, 2026: France Attributes the October Supermarket Attack to Iran's Shahid Kaveh The refrigeration cyberattack campaign that hit about 700 French supermarkets on October 11, 2026, is now…
SOCRadar
Canadian Webmail Access, US Bank Dump, Peru Leak, Spencer’s Breach, and ZoomInfo Sale
SOCRadar Dark Web Team identified several underground posts, including an alleged webmail access sale targeting a Canadian infrastructure company, a claimed US banking database dump involving sensitive credentials, and an…
SOCRadar
Refrigeration Cyberattacks Draw FBI and CISA Warning
Five U.S. federal agencies have issued a joint warning about refrigeration cyberattacks, saying threat actors are targeting refrigeration controllers and electronic temperature controllers in retail grocery and cold storage facilities.…
SOCRadar
sshole: OpenSSH Fixes Password Bypass on Alpine Linux
[Update] November 10, 2026: SSHole Exploited in the Wild, Added to CISA KEV OpenSSH has shipped an emergency release, version 10.6p2, to stop a password bypass that lets a remote…
SOCRadar
Qilin Ransomware Admin Haise Allegedly Unmasked
GangExposed, the anonymous leaker who spent 2025 exposing Conti and Trickbot leadership, has moved on to Qilin. A new post on the channel shares an investigation naming a Russian national…
SOCRadar
Microsoft Paint RCE CVE-2026-83844 Raises Store Update Questions
Microsoft has disclosed CVE-2026-83844, an out-of-bounds read in the Microsoft Store version of Paint that could allow remote code execution. Microsoft rates the vulnerability Important, while its CVSS score of…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action