Underground markets, forums and takedowns.

Darkweb · Aug 6, 2026

CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps

Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom…

Darkweb · Aug 3, 2026

Chinese Actor Weaponizes Deepseek AI Agent to Attack Security Firm

Researchers intercepted and investigated the model, which was attempting to compromise more than 1,200 hosts for…

Darkweb · Aug 3, 2026

Midnight Blizzard Targets Travelers via Captive Portals

Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens

Darkweb · Jul 31, 2026

Minnesota Water Utility Attacks Expose Sector's Cyber-Risks

A likely Iran-backed actor targeted more than 30 community water systems in Minnesota in a sobering reminder of rising…

Darkweb · Jul 29, 2026

When AppSec Scanners Become a Supply Chain Attack Vector

New research shows how security scanners embedded in the software supply chain can be attacked to serve as a foothold…

Darkweb · Jul 21, 2026

Russian Hacker Turns Jailbroken Claude Into Pentest Platform

Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models

Darkweb · Jul 3, 2026

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains…

Darkweb · Jun 18, 2026

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay…