Aggregator

Daily Dose of Dark Web Informer - May 6th, 2026

Dark Web Informer - Cyber Threat Intelligence

2 months 2 weeks ago

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

Dark Web Informer

RAZER CTF 2026

2 months 2 weeks ago

Name: RAZER CTF 2026 (an Razer CTF event.)
Date: May 5, 2026, 6:30 a.m. — 06 May 2026, 06:30 UTC [add to calendar]
Format: Jeopardy
On-line
Location: India
Offical URL: http://ctf.droidecks.sbs/
Rating weight: 0.00
Event organizers: Droidex

Best OSINT Tools for Investigations and Threat Intelligence in 2026

2 months 2 weeks ago

Explore the best OSINT tools for your digital investigations, threat intelligence, reconnaissance, and tracking online activity in 2026.

Waqas

Hackers abuse Google ads for GoDaddy ManageWP login phishing

Bleeping Computer.

2 months 2 weeks ago

A phishing campaign delivered through Google sponsored search results is targeting credentials for ManageWP, GoDaddy's platform for managing fleets of WordPress websites. [...]

Bill Toulas

VoidStealer Malware Darts Past Google Chrome's Encryption

2 months 2 weeks ago

Authors of the VoidStealer Trojan uncovered yet another way to get around Google's App-Bound Encryption (ABE), opening the door to infostealers.

Jai Vijayan

A DOD contractor’s API flaw exposed military course data and service member records

2 months 2 weeks ago

Researchers say Schemata’s platform exposed names, emails, base assignments, and course materials before the company patched the issue and contacted government authorities.

The post A DOD contractor’s API flaw exposed military course data and service member records appeared first on CyberScoop.

Greg Otto

Instructure Breach Exposes Schools' Vendor Dependence

2 months 2 weeks ago

ShinyHunters' attack on Instructure, which owns the widely used Canvas learning management system (LMS), carries big questions about the trust educational institutions put into their vendors.

Alexander Culafi

Safepay

2 months 2 weeks ago

You must login to view this content

cohenido

Safepay

2 months 2 weeks ago

You must login to view this content

cohenido

Safepay

2 months 2 weeks ago

You must login to view this content

cohenido

Safepay

2 months 2 weeks ago

You must login to view this content

cohenido

Safepay

2 months 2 weeks ago

You must login to view this content

cohenido

Safepay

2 months 2 weeks ago

You must login to view this content

cohenido

Safepay

2 months 2 weeks ago

You must login to view this content

cohenido

CVE-2026-7875 | Qwibit NanoClaw Message messages_out.id/content.files path traversal (ID 7814e45 / EUVD-2026-27873)

2 months 2 weeks ago

A vulnerability categorized as critical has been discovered in Qwibit NanoClaw. This affects an unknown part of the component Message Handler. The manipulation of the argument messages_out.id/content.files results in path traversal. This vulnerability is reported as CVE-2026-7875. The attack requires a local approach. No exploit exists. It is advisable to implement a patch to correct this issue.

vuldb.com

CVE-2024-30151 | HCL BigFix Service Management 23 log file (KB0127782 / EUVD-2024-28087)

2 months 2 weeks ago

A vulnerability categorized as problematic has been discovered in HCL BigFix Service Management 23. Affected is an unknown function. Such manipulation leads to sensitive information in log files. This vulnerability is uniquely identified as CVE-2024-30151. The attack can be launched remotely. No exploit exists.

vuldb.com

CVE-2025-31974 | HCL BigFix Service Management 23 insecure default initialization of resource (KB0128144 / EUVD-2025-209705)

2 months 2 weeks ago

A vulnerability was found in HCL BigFix Service Management 23. It has been rated as problematic. This impacts an unknown function. This manipulation causes insecure default initialization of resource. This vulnerability is handled as CVE-2025-31974. The attack can be initiated remotely. There is not any exploit available.

vuldb.com

CVE-2025-31960 | HCL BigFix Service Management 23 consumer_company information exposure (KB0128144 / EUVD-2025-209704)

2 months 2 weeks ago

A vulnerability identified as problematic has been detected in HCL BigFix Service Management 23. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument consumer_company results in information exposure through error message. This vulnerability was named CVE-2025-31960. The attack may be initiated remotely. There is no available exploit.

vuldb.com

CVE-2026-41934 | givanz Vvveb up to 1.0.8.1 incomplete blacklist (GHSA-vfjj-gcvv-w248 / EUVD-2026-27889)

2 months 2 weeks ago

A vulnerability classified as critical was found in givanz Vvveb up to 1.0.8.1. This affects an unknown part. The manipulation results in incomplete blacklist. This vulnerability is cataloged as CVE-2026-41934. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

vuldb.com

After 17 years, Gavril Sandu extradited to U.S. for hacking scheme

Security Affairs

2 months 2 weeks ago

Romanian citizen Gavril Sandu was extradited to the U.S. nearly 17 years after a hacking scheme. He was indicted in 2017 and arrested in 2026. Romanian national Gavril Sandu, 53, has been extradited to the United States for his role in a hacking scheme that took place 17 years ago. “On November 14, 2017, a […]

Pierluigi Paganini