Threat intelligence is only as strong as the sources that feed it. While most organizations are familiar with surface web data and even dark web monitoring, there’s a lesser-known but highly valuable space in between: the deep web. This hidden layer of the internet, inaccessible to standard search engines, holds a wealth of information that...Read More
Exposure doesn’t automatically make you a victim of identity theft. The real danger isn’t a high-tech cyber-heist either; it’s automated “password stuffing.” Q: Should I be worried that my personal information is already on the dark web? A: With data breaches making headlines almost weekly, the reality is simple: If you’ve had an email address...Read More
Security teams often associate cybercrime forums exclusively with the Dark Web and Tor. However, several of the most active underground communities now operate openly on the surface web, accessible via standard browsers and indexed infrastructure. These forums facilitate the trade of stolen credentials, corporate access, ransomware tools, and stealer logs. Some of the most active...Read More
There is a part of the Internet—most of it, in fact—that is hidden from Google. It is private, or illicit, or simply unknown. And NASA wants to help you reach it. The space agency announced last month that it will join forces with the Defense Advanced Research Projects Agency (DARPA) to help make sense of that part of the...Read More
Despite its polished name, The Gentlemen Ransomware shows little interest in playing nice. First observed in 2025, the group quickly established itself as a capable and coordinated threat, operating across multiple regions and enterprise environments with notable speed. This profile outlines who The Gentlemen are, how they operate, which organizations they target, and what defenders...Read More
SafePay is a ransomware group first observed around September 2024. It encrypts files and demands a cryptocurrency payment to restore access. The group behind it also steals data from victims and threatens to leak it on a Dark Web site if the ransom is not paid, a method known as double extortion. Most ransomware groups...Read More
By mid-2025, the alias ByteToBreach was already an active seller on a major cybercrime forum, offering access and databases from banks, telecom, airlines, and other large enterprises. On November 14, 2025, the actor linked this activity to critical infrastructure by claiming the Eurofiber breach and advertising data taken from the company’s GLPI service management platform,...Read More
It is hard to believe the police first began investigating Jeffrey Epstein more than two decades ago given the severity and depth of the convicted sex offender’s crimes are only now really beginning to be understood. More than 21 years after Palm Beach police launched an inquiry into the disgraced financier after the family of...Read More
The notorious B1ack’s Stash dark web carding marketplace has announced the free download of 4.6 million stolen credit card records. The data, it says, was dumped after sellers were caught reselling card data purchased from B1ack’s Stash on competing platforms, a violation of the marketplace’s policies. B1ack’s Stash allegedly suspended 8 million stolen CVV2 records...Read More
A Filipino hacktivist group identifying as “Nullsec Philippines” claims responsibility for the supposed defacing of the Senate website in a social media post late Wednesday night, June 10, 2026. (Screengrab from Nullsec Philippines/Facebook) MANILA, Philippines — “Transparency is not optional.” A Filipino hacktivist group identifying as “Nullsec Philippines” said this after claiming responsibility for the...Read More
