Cyber Breaches

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database that they allege was stolen from the Middle East Automobile and Touring Club (mac.org.sa) of Saudi Arabia. According to the seller’s post, the database contains 10,000 personal records. The actor is using ...

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extremely serious claim to be selling a “1-day” exploit for Veeam Backup & Replication. According to the seller’s post, the exploit is a Remote Code Execution (RCE) for a recently disclosed vulnerability, identified as CVE-2025-23121 ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database and “live access” that they allege were stolen from the Ministry of Vocational Training and Employment of Tunisia (mfpe.gov.tn). According to the seller’s post, the database contains 4,000 personal records. The actor ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database and “live access” that they allege were stolen from the Justice Ministry of Tunisia. According to the seller’s post, the data contains the personal information of 530 ministry personnel. The actor has ...

Dark Web News Analysis A threat actor on a known cybercrime forum is auctioning what they claim is unauthorized shell access to a Peruvian e-commerce company’s website. According to the seller’s post, the access is for a Magento installation and, critically, provides access to sensitive customer data, including credit card ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database that they allege was stolen from Umm Al-Qura University, a major public university in Saudi Arabia. According to the seller’s post, the database contains 2,500 personal data records. The actor is using ...

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extremely serious claim to be selling a zero-day exploit. According to the seller’s post, the exploit is a Remote Code Execution (RCE) vulnerability that allegedly targets a “very popular corporate VPN.” The actor is offering ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database of what they describe as “leads” that they allege were stolen from a Danish clothing store. According to the seller’s post, the database contains sensitive customer information, including full names, email addresses, ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a large database that they allege was stolen from Iran’s Ministry of Roads and Urban Development. According to the seller’s post, the 2GB database contains 9 million records of housing and related personal data, ...