BTC$84,644-0.31% LTC$70.01+1.79% XMR$542.22-0.81%
TorPortal TorPortalMarkets, mirrors, dark web news

Tor and dark web news

Stories from trusted sources, picked for people who actually use Tor.

Latest dark web stories

Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
BleepingComputer · Sep 7, 2026 · 2 min read

Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks to deploy a backdoor.
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
BleepingComputer · Sep 7, 2026 · 1 min read

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials.
Mathspace discloses data breach affecting over 1 million people
BleepingComputer · Sep 7, 2026 · 3 min read

Mathspace discloses data breach affecting over 1 million people

Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students, staff, and parents after breaching its Metabase internal reporting system.
Trezor data breach impact now reaches 81,000 customers
BleepingComputer · Sep 7, 2026 · 1 min read

Trezor data breach impact now reaches 81,000 customers

Cryptocurrency hardware wallet maker Trezor says an August data breach at its shipping and logistics provider, ShipMonk, affects an additional 67,000 U.S. customers.
Berlin investigates new data leak after hackers publish stolen login credentials
The Record · Sep 7, 2026 · 4 min read

Berlin investigates new data leak after hackers publish stolen login credentials

Another trove of data from Berlin's government has appeared online, authorities said. Germany's information security agency separately warned about the Rhysida cybercrime group.
ChatGPT can now connect to your personal apps to mimic writing style
BleepingComputer · Sep 7, 2026 · 1 min read

ChatGPT can now connect to your personal apps to mimic writing style

OpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from your connected apps.
Hackers exploit new MikroTik RouterOS flaws to hijack routers
BleepingComputer · Sep 7, 2026 · 1 min read

Hackers exploit new MikroTik RouterOS flaws to hijack routers

Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet.
ConnectWise warns of new ScreenConnect flaw without patch
BleepingComputer · Sep 7, 2026 · 1 min read

ConnectWise warns of new ScreenConnect flaw without patch

ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week.
N-able patches max severity N-central flaw amid ongoing attacks
BleepingComputer · Sep 7, 2026 · 1 min read

N-able patches max severity N-central flaw amid ongoing attacks

N-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote monitoring and management (RMM) platform.
The Dark Web Isn’t as Anonymous as People Think
DarkDotWeb · Sep 7, 2026 · 6 min read

The Dark Web Isn’t as Anonymous as People Think

The dark web offers privacy, but using Tor doesn’t make someone completely anonymous. An analysis of how human mistakes can expose darknet identities.
UK Police Seize 20.21 Bitcoin Linked to Darknet Markets
DarkDotWeb · Sep 7, 2026 · 2 min read

UK Police Seize 20.21 Bitcoin Linked to Darknet Markets

Avon and Somerset Police forfeited 20.21 BTC and other assets worth £1.03 million after tracing them to darknet markets.
Attackers Hijack MikroTik Routers Through RouterOS Flaws
DarkDotWeb · Sep 7, 2026 · 3 min read

Attackers Hijack MikroTik Routers Through RouterOS Flaws

Attackers are exploiting MikroTik RouterOS flaws to take full control of internet-exposed routers through SSH without authentication.
ChatGPT Astra is now rolling out to $20 Plus subscription
BleepingComputer · Sep 7, 2026 · 1 min read

ChatGPT Astra is now rolling out to $20 Plus subscription

OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no word on when free users will get access..
Attackers conceal phishing lures using invisible Unicode characters
BleepingComputer · Sep 6, 2026 · 1 min read

Attackers conceal phishing lures using invisible Unicode characters

Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters.
Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain
BleepingComputer · Sep 5, 2026 · 1 min read

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC).