Squidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)
CVE-2026-47729, nicknamed Squidbleed, is a heap buffer over-read in the FTP gateway of the Squid web proxy.
Dark Web Informer - Cyber Threat Intelligence
Illicit Access to France's Vehicle Registration System SIV Allegedly Offered For Sale
A threat actor using the alias shabat is advertising the sale of unauthorized access to France's SIV (Système d'Immatriculation des Véhicules), the country's official national vehicle-registration system.
Around 30,700 Records Allegedly Leaked From France's Hospital Federation FHF
A threat actor using the alias Saturne has posted what they describe as the database of FHF.fr, the official website of the Fédération Hospitalière de France (French Hospital Federation), which represents public healthcare and medico-social institutions and runs a major job board for the public health sector.
Argentine Telemedicine Platform Meducar Allegedly Breached, 3.1 Million Patient Records Held to Ransom
A threat actor using the alias Kazu is extorting Meducar (meducar.com), a Latin American telemedicine and patient-management platform owned by Grupo Cormos, an Argentine health-tech company.
European Real Estate CRM Whise Allegedly Breached, Over 40 Million Records Leaked
A threat actor using the alias ChimeraZ has posted what they describe as the database of Whise.eu, a European real-estate CRM used by agencies and agents to manage leads, properties, and transactions.
US Stock-Market Forum Stockaholics Allegedly Breached, Member Database Leaked
A threat actor using the alias TomTom has posted what they describe as the member database of Stockaholics.net, a US-based online forum for stock-market, trading, cryptocurrency, and financial-market discussion.
Indian Food Delivery App Deliware Allegedly Breached, Exposing User Data, Tokens, and Stripe Keys
A threat actor using the alias NightBroker has posted what they describe as the database of Deliware (deliware.app), an Indian food-delivery app serving restaurant owners, delivery drivers, and customers.
Around 318,000 Student Records, Including Minors and Facial Photos, Allegedly Leaked From France's Région Occitanie
A threat actor using the alias xMetah has posted what they describe as a database from laregion.fr, the official site of France's Région Occitanie (Pyrénées-Méditerranée), one of the country's regional governments.
Over 100,000 Records Allegedly Exposed in Multiple Magelang City Government Leaks
A forum user posting under the alias ctyzn, identifying as a concerned citizen, claims to have documented multiple recent government data exposures affecting Magelang City, Indonesia.
Argentine Telemedicine Platform ConsultorioMovil Allegedly Breached, 1.73 TB Held to Ransom
A threat actor using the alias Kazu is extorting ConsultorioMovil (consultoriomovil.net), a telemedicine and healthcare platform owned by Grupo Cormos (Cormos S.A.), an Argentine health-tech company.
Colombian Healthcare Platform SaludTools Allegedly Breached, 2.3 TB of Records Held to Ransom
A threat actor using the alias Kazu is extorting SaludTools (saludtools.com), a Colombian health-tech company that provides a cloud-based practice-management and electronic medical record (EMR/EHR) platform for physicians, clinics, and healthcare professionals.
Website Uptime
Real-time uptime for Dark Web Informer's threat-intel feeds, APIs, and platform. Monitored continuously, refreshed every minute.
New Darknet Markets
Live status, uptime, and verified .onion mirrors for active darknet markets. Real-time monitoring updated continuously by Dark Web Informer.
Around 16,800 Records Allegedly Leaked From French Real Estate Professional Platform Ouestfrance-Immo
A threat actor using the alias ChimeraZ has posted what they describe as the database of Ouestfrance-Immo.pro (ouestfrance-immo.com), a French digital platform built for real-estate professionals and property marketing services.
Brazilian Construction Information Company PiniWeb Allegedly Breached, 13.9 GB Listed For Sale
A threat actor using the alias S0BER is advertising the sale of a claimed ~13.9 GB dataset of around 10,290 files across three RAR archives, spanning 2003 to 2026, said to be stolen from PiniWeb / Editora Pini (piniweb.com.br), a Brazilian information company that has served the construction industry since 1948.
Buyer and Seller Contact Records Allegedly Leaked From French Real Estate Platform Timer Immobilier
A threat actor using the alias 0xSec has posted what they describe as a small database from Timer Immobilier, a specialized French real-estate agency and online platform that runs a transparent “interactive sale” (auction-style) system for property buyers and sellers.
Around 79,000 Records Allegedly Leaked From French Property Management Software MaGestionLocative
A threat actor using the alias ChimeraZ has posted what they describe as a partial database of MaGestionLocative (magestionlocative.fr), a French property management software platform used by landlords and real-estate professionals.
Daily Dose of Dark Web Informer - June 17th, 2026
This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.
Pre-Auth RCE in Joomla Content Editor: Profile Import to PHP Execution (CVE-2026-48907)
CVE-2026-48907 is a critical unauthenticated remote code execution flaw in the Joomla Content Editor (JCE), the most widely installed editor extension for Joomla.
Around 93,900 Records Allegedly Leaked From French Real Estate Software TakTikimmo
A threat actor using the alias ChimeraZ has posted what they describe as the database of TakTikimmo (taktikimmo.fr), a French professional real-estate software platform that helps agencies manage property listings, client relationships, and sales processes.
A real-time cyber threat intelligence platform that monitors the dark web and clearnet for data breaches, ransomware campaigns, darknet market activity, leaked databases, and active threat actors.