Root-Me Leak: Hacker Claims to Dump 15,200 Challenge Files
A threat actor using the alias Kiria claims to have leaked an archive tied to Root-Me, the popular French cybersecurity training and CTF platform.
Dark Web Informer - Cyber Threat Intelligence
Daily Dose of Dark Web Informer - June 4th, 2026
This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.
SSRF to Root: Unauthenticated File-Write Flaw in Cisco Unified CM (CVE-2026-20230)
CVE-2026-20230 is an unauthenticated, remote server-side request forgery (SSRF) vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME).
IEEA Campeche Data Breach: Hackers Claim to Leak Staff and Student Records
A threat actor using the alias l1ghtSoulHem, posting for "SoulHemTeam," claims to have breached the IEEA (State Institute for Adult Education) in Campeche, Mexico, and leaked a database tied to campeche.inea.gob.mx.
Threat Actor Claims to Sell a Carvivo Automotive Lead Database Affecting Millions in France
A threat actor using the alias DumpsecV2 ("Dumpsec") claims to be selling a large dataset stolen from Carvivo, a French SaaS provider whose "Carvivo Contact" platform manages automotive sales leads for car dealerships across Europe.
Threat Actor Claims to Sell 58K Confidential SUNACOOP Venezuela Cooperative Records
A threat actor using the alias malconguerra2 claims to be selling a confidential dataset attributed to SUNACOOP, Venezuela's national superintendency of cooperatives.
Threat Actor Claims to Leak 10,000+ Records From the Nayarit Public Property Registry
A threat actor using the alias Hermes_Olymp, posting on behalf of "Olympus_Group," claims to have leaked 10,000+ records from the RPP Nayarit, the public property registry of Nayarit state, Mexico.
Threat Actor Claims to Sell a 110 GB Iberdrola Customer Database Affecting 7 Million Customers
A threat actor using the alias spain claims to be selling a 109.79 GB customer database stolen from Iberdrola, one of the world's largest electricity utilities, and lists the domain iberdrola.es.
Threat Actor Claims to Sell 24 Million Confidential SENIAT Venezuela Tax Records, 30 GB
A threat actor using the alias malconguerra2 claims to be selling a 30 GB confidential dataset attributed to SENIAT, Venezuela's national tax and customs authority.
Threat Actor Claims to Leak an INEGI Mexico Database Dump, 122K Businesses + 30K PII Records
A threat actor using the alias sativa claims to have leaked a database dump attributed to INEGI, Mexico's national statistics institute, allegedly sourced from internal GOB.MX services.
Threat Actor Claims to Sell Live Web-Shell Access to a NASA Web Application
A threat actor using the alias hackformetome claims to be selling persistent web-shell access and a related exploit to a compromised NASA .gov web application, advertising remote code execution and the ability to pivot into internal network ranges.
Australian Workplace Catering Platform Hampr Hit by Alleged 360K+ Record Leak
A threat actor using the alias 2019 claims to have leaked a database allegedly belonging to Hampr, an Australian workplace food and catering management platform used by businesses to organise office meals, corporate catering, pantry supplies, and workplace events.
Root in One Request: Pre-Auth RCE in Marimo (CVE-2026-39987)
CVE-2026-39987 is a critical pre-authentication remote code execution flaw in Marimo, a popular open-source reactive Python notebook framework and a modern alternative to Jupyter with roughly 19.6k GitHub stars.
Argentine Healthcare Provider Swiss Medical Listed in Alleged 458K-Record Member Data Sale
A threat actor using the alias Moelester claims to be selling a dataset allegedly originating from Swiss Medical, a major Argentine private healthcare and health-insurance company.
French Real-Estate Co-op Platform Amepi Hit by Alleged 6K-Record Leak
A threat actor using the alias ChimeraZ claims to have leaked a database allegedly belonging to Amepi (Amanda), described as the leading French cooperative platform for sharing exclusive listings among real-estate agencies.
Daily Dose of Dark Web Informer - May 28th, 2026
This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.
US Student Mental-Health Provider Mindpath College Health Listed on Ransomware Leak Site
Mindpath College Health, a US provider of mental and behavioral health services for college students, has been listed on a ransomware group's data-leak site.
One Forged Header: Unauthenticated Authentication Bypass in Fortinet FortiClient EMS (CVE-2026-35616)
Fortinet has disclosed a critical authentication bypass affecting FortiClient Endpoint Management Server (EMS).
French Real-Estate Tour Platform EnVisite Hit by Alleged 138K-Record Leak
A threat actor using the alias ChimeraZ claims to have leaked a database allegedly belonging to EnVisite, a French platform for real-estate virtual tours used by agents to create and share interactive property presentations.
French Real-Estate Platform Figaro Immobilier Hit by Alleged 100K Invoice Leak
A threat actor using the alias ChimeraZ claims to have leaked a database allegedly belonging to Figaro Immobilier / Explorimmo, a French real-estate platform offering property listings for sale, rent, and vacation stays.
A real-time cyber threat intelligence platform that monitors the dark web and clearnet for data breaches, ransomware campaigns, darknet market activity, leaked databases, and active threat actors.