One guy. Global cybercrime. Tracked so you don't have to. Ransomware, data breaches, dark web activity, darknet markets, IOCs & emerging threats. Stay informed!
The Dark Web
Joined August 2023
- Tweets36K
- Following95
- Followers25K
- Likes33.8K
Pinned Tweet
‼️ Footage of the LeakBase domain administrator getting arrested in Taganrog, Russia.
techcrunch.com/2026/03/25/ru…
Dark Web Informer retweeted
Buy a seedbox if you're going to torrent.
seedboxgui.de/
Dark Web Informer retweeted
🚨 Oracle patches critical unauthenticated Java vulnerability; CVE-2026-91403
A critical vulnerability in the Java Secure Socket Extension component affects Oracle Java SE and multiple GraalVM releases.
The flaw carries a CVSS score of 9.1 and can be exploited remotely without credentials or user interaction.
⠀
Successful exploitation could allow attackers to access, create, delete or modify critical data available to the affected Java or GraalVM deployment.
Affected products include:
• Oracle Java SE 8, 11, 17, 21, 25 and 27 releases listed by Oracle
• Oracle GraalVM for JDK 17.0.21 and 21.0.13
• Oracle GraalVM Enterprise Edition 21.3.20
⠀
Oracle released a security patch on October 21 and recommends applying the available updates.
Source:
oracle.com/security-alerts/a…
This is pretty cool, ngl did not know this was a thing. Someone on Dread is looking to commission realistic replicas of pills and other drugs to display as artwork, with no actual drugs involved.
An example I found: monartofficial.com
🚨🇺🇸 South Carolina man charged with distributing and possessing child sexual abuse material
Daniel Aaron Todd, 23, of Ridgeville, was arrested on October 13 after a CyberTipline report from the National Center for Missing & Exploited Children led investigators to him.
⠀
Authorities said files containing child sexual abuse material were discovered during a search of his residence.
Todd faces one count of second-degree sexual exploitation of a minor and one count of third-degree sexual exploitation of a minor. Each felony charge is punishable by up to 10 years in prison.
⠀
The Dorchester County Sheriff’s Office and South Carolina Internet Crimes Against Children Task Force investigated the case.
Source:
scag.gov/about-the-office/ne…
🚨 Initial Access: LATAM Manufacturing Company
A threat actor is advertising SSL-VPN access to an unnamed manufacturing company in Latin America.
The actor claims the company has global partners, including major technology companies, and large investors, suggesting potentially high revenue.
The access reportedly has not been explored further to avoid alerting the target.
This claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Dark Web Informer retweeted
🚨 eMudhra exits global SSL/TLS certificate business following weak CA key incident
The Indian digital trust company says its board has decided to voluntarily withdraw from the global SSL/TLS market after eight intermediate certificate authorities were revoked because their published keys were weak.
⠀
Browser root programs also distrusted the associated eMudhra ECC root. The company says the affected CAs never issued end-user certificates, its infrastructure was not compromised and no data was breached.
⠀
eMudhra will keep its G1 RSA roots operating during the transition and replace affected customer certificates free of charge through partner providers.
Revocation and certificate-status services will continue until every issued certificate has expired or been replaced.
⠀
The company says global SSL/TLS represents around 1% of its global revenue. Its digital-signature, eSign, enterprise PKI and identity services will continue operating normally.
Source: emudhra.com/en/press-release…
Ready for my YouTube year in review
Ready for my Spotify year in review
Ready for my Netflix year in review
Ready for my Instagram year in review
Ready for my TikTok year in review
Ready for my X year in review
Ready for my Reddit year in review
Ready for my Discord year in review
Ready for my Twitch year in review
Ready for my Steam year in review
Ready for my PlayStation year in review
Ready for my Xbox year in review
Ready for my Nintendo year in review
Ready for my Amazon year in review
Ready for my Google year in review
Ready for my Apple year in review
Ready for my Microsoft year in review
Ready for my Snapchat year in review
Ready for my Facebook year in review
Ready for my LinkedIn year in review
Ready for my Uber year in review
Ready for my DoorDash year in review
Ready for my Airbnb year in review
Ready for my PayPal year in review
Ready for my Venmo year in review
Ready for my Duolingo year in review
Ready for my ChatGPT year in review
Ready for my GitHub year in review
Ready for my Cloudflare year in review
Ready for my Wikipedia year in review
Ready for my FBI watchlist year in review 😬
Ready for my therapist's year in review
🚨 Oracle patches critical unauthenticated Java vulnerability; CVE-2026-91403
A critical vulnerability in the Java Secure Socket Extension component affects Oracle Java SE and multiple GraalVM releases.
The flaw carries a CVSS score of 9.1 and can be exploited remotely without credentials or user interaction.
⠀
Successful exploitation could allow attackers to access, create, delete or modify critical data available to the affected Java or GraalVM deployment.
Affected products include:
• Oracle Java SE 8, 11, 17, 21, 25 and 27 releases listed by Oracle
• Oracle GraalVM for JDK 17.0.21 and 21.0.13
• Oracle GraalVM Enterprise Edition 21.3.20
⠀
Oracle released a security patch on October 21 and recommends applying the available updates.
Source:
oracle.com/security-alerts/a…
CVE-2026-64638: XSS2Shell WordPress Pre-Authentication XSS to Remote Code Execution
PoC: github.com/Boreas37/CVE-2026…
🚨 Two critical Linux KSMBD remote code execution flaws disclosed before fixes were available
The vulnerabilities, tracked as ZDI-CAN-33774 and ZDI-CAN-33549, both carry CVSS scores of 9.0 and affect KSMBD, the Linux kernel’s built-in SMB server.
⠀
ZDI-CAN-33774 can reportedly be triggered without authentication against systems running KSMBD on port 445.
ZDI-CAN-33549 affects the SMB Direct path and requires an RDMA-capable interface, a writable KSMBD share and a client using SMB Direct.
⠀
Neither vulnerability currently has a CVE identifier. As of October 22, fixes had not been added to the mainline Linux kernel or linux-next.
Administrators should determine whether KSMBD is active and consider restricting network access until fixes become available.
