AssuranceAmerica Data Breach Exposes Driver’s License Numbers of 6.99 Million People
U.S. insurance provider AssuranceAmerica has confirmed a data breach affecting nearly 7 million people, exposing personal information and driver’s license numbers.
Dark Web Informer - Cyber Threat Intelligence
Foxit PDF Reader RCE Flaw CVE-2024-30326 Highlights PDF Attack Surface
A remote code execution vulnerability in Foxit PDF Reader, tracked as CVE-2024-30326, highlights the continued risk of malicious PDF files being used as an initial access vector.
GitLost Shows How GitHub AI Agents Can Leak Private Repository Data
Noma Labs has disclosed GitLost, a prompt injection vulnerability that showed how GitHub’s AI-powered Agentic Workflows could be tricked into leaking private repository data through a public GitHub issue.
French Medical Platform Follow Data Offered for Sale, Over 2 Million Patient Records Exposed
A threat actor using the alias Saturne is selling a database from Follow, a French Ségur-certified medical software and patient-record platform used by specialist doctors and surgeons.
Payment Firm Nayax Allegedly Fully Breached, Actor Threatens 100TB Release With Over 1 Billion Card Records
A threat actor using the alias TheSyndicate claims to have fully compromised Nayax, an Israeli global payments and fintech company (NASDAQ: NYAX, TASE: NYAX.TA), stating they have been inside its systems for almost a year.
Culiacán Municipal Health Portal Breached in Mexico, Minors' and Patients' Medical Records Leaked
A threat actor using the alias derm0nix (Hackero$ Crew) claims to have breached the Portal de Salud de Culiacán, the official digital health system of the Culiacán municipal government in Mexico, and has leaked the data for free.
When the Password Check Fails, You're In: The Hidden Admin Backdoor in Tenda Router Firmware (CVE-2026-11405)
CVE-2026-11405 is an undocumented authentication backdoor in multiple versions of Tenda router firmware.
Tokyo Police Arrest 15-Year-Old Over Alleged Bandai Channel Cyberattack
Tokyo police have arrested a 15-year-old student over an alleged cyberattack targeting Bandai Channel, the anime and tokusatsu streaming service operated by Bandai Namco Filmworks.
Adobe ColdFusion flaw CVE-2026-48282 is now being Exploited in the Wild
Attackers are exploiting a maximum-severity ColdFusion path traversal vulnerability that can lead to remote code execution on unpatched servers.
Pre-Auth Access-Control Bypass in BeyondTrust Remote Support and PRA (CVE-2026-40138)
CVE-2026-40138 is a critical pre-authentication vulnerability in the authentication subsystem of BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA).
A Long-Lived KVM Bug Resurfaces: Shadow Paging Use-After-Free in the Linux Kernel (CVE-2026-53359)
CVE-2026-53359 is a use-after-free in the Linux kernel's KVM x86 shadow paging code.
Malaysia's LHDN Tax Portal Data Offered for Sale, 10 Million Taxpayer Records Exposed
A threat actor using the alias dezetat is advertising a database from Malaysia's Inland Revenue Board (LHDN / IRBM), taken from the MyTax portal, for $20,000.
Libyan Ministry of Education Allegedly Breached, Students' IDs and Photos Threatened With Release
A threat actor using the alias EvaN47 claims to have breached the Libyan Ministry of Education (moe.gov.ly) and is threatening to publish a 287GB dataset of students' data if the ministry does not make contact.
Your Smart TV Might Be Working for Cybercriminals: Inside Google's Takedown of the NetNut Proxy Network
How a coordinated strike against a 2-million-device botnet exposes the hidden economy of residential proxies, and what it means for anyone with a connected device at home.
Broker miyako Advertising Root-Level Firewall Access to Five Organizations Across Four Countries
An initial access broker using the alias miyako is advertising root-level access to five separate organizations, each priced at $400 (non-negotiable).
Logistics Conglomerate Grupo ATC Data Offered for Sale After Ransom Refused
A threat actor using the alias Straightonumberone is selling what they describe as data stolen from Grupo ATC, a Mexican logistics conglomerate (comprising TLE, TLEA, and PHES), for $1,000 after a ransom negotiation reportedly failed.
Libyan Civil Aviation Authority Allegedly Breached, 300GB of Aviation Data Advertised
A threat actor using the alias EvaN47 has posted what they describe as a breach of the Libyan Civil Aviation Authority (caa.gov.ly), advertising a roughly 300GB dataset spanning 2015 to 2026 with a contact for acquisition.
Data From Domain Registrar and Host Netim Allegedly Offered for Sale, Including Source Code and Customer Records
A threat actor using the alias lucy is advertising a private, one-time sale of what they describe as comprehensive data from Netim.com, a French domain registrar and hosting provider, for $5,000 in cryptocurrency.
One POST to RCE: Unauthenticated Code Execution in Langflow (CVE-2026-33017)
CVE-2026-33017 is a critical unauthenticated remote code execution flaw in Langflow, the popular open-source visual framework for building AI agents and RAG pipelines.
French Tour Operator Pachatours Allegedly Breached, Passport, Payment and Credential Data Exposed
A threat actor using the alias misere, crediting collaborators (ChimeraZ and NightBroker), has posted what they describe as a complete database breach of Pachatours (pachatours.fr / pachatours.pro), a French tour operator specializing in Hajj packages and Tunisian beach holidays.
A real-time cyber threat intelligence platform that monitors the dark web and clearnet for data breaches, ransomware campaigns, darknet market activity, leaked databases, and active threat actors.