Cyber Breaches

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a partial database that they allege was stolen from Avalara, a major provider of tax compliance software used by thousands of businesses worldwide. According to the seller’s post, the breach occurred in September 2025. ...

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extremely serious claim to be selling a Stored Cross-Site Scripting (XSS) vulnerability that they allege affects X (formerly Twitter). According to the seller’s post, the vulnerability is a persistent, or “Stored,” XSS. The actor is ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked multiple databases that they allege were stolen from the Meknès Smart City initiative in Morocco. According to the seller’s post, the compromised data is extensive, spanning a wide range of organizational and user ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked multiple databases that they allege were stolen from the Rv Institute of Management (rvim.edu.in), an educational institution in India. According to the seller’s post, the compromised data is extensive, including databases for “Finance,” ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked a massive database that they allege was stolen from Zeelab Pharmacy, an online pharmacy in India. According to the seller’s post, the compromised data consists of 4.4 million lines of information spread across ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell unauthorized FortiOS VPN access to the internal network and databases of Orange Maroc, a major telecommunications company. According to the seller’s post, the access, priced at $7,000, purportedly grants extensive control and visibility over ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database that they allege was stolen from Ejad Tech (Ejadtech.com.sa), an IT company based in Saudi Arabia. According to the seller’s post, the database contains approximately 4,600 personal data records. The actor has ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell unauthorized network access to what they describe as a “top Saudi Website about cellular network,” which strongly implies a major Saudi Arabian telecommunication company. The seller’s post indicates a focus on a discreet financial ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database that they allege was stolen from the Middle East Automobile and Touring Club (mac.org.sa) of Saudi Arabia. According to the seller’s post, the database contains 10,000 personal records. The actor is using ...