BTC$84,521-0.54% LTC$68.72+1.12% XMR$536.90-2.07%
TorPortal TorPortalMarkets, mirrors, dark web news

Tor and dark web news

Stories from trusted sources, picked for people who actually use Tor.

Latest dark web stories

BleepingComputer · Sep 26, 2026 · 1 min read

Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer

Anthropic's Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, shorter sentences, and simpler wording compared with Opus 5.
Microsoft pauses KB5002907 update after Office license deactivations
BleepingComputer · Sep 26, 2026 · 3 min read

Microsoft pauses KB5002907 update after Office license deactivations

Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases completely removed, perpetual Office 2016 and Office 2019 installations.
GitHub Actions re-enabled with Mini Shai-Hulud payload still active
BleepingComputer · Sep 26, 2026 · 2 min read

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code.
OpenAI's AI agents accidentally uploaded user-provided images to third-party sites
BleepingComputer · Sep 26, 2026 · 2 min read

OpenAI's AI agents accidentally uploaded user-provided images to third-party sites

OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and evaluation tasks.
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
Krebs on Security · Sep 25, 2026 · 5 min read

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and…
Kiteworks urges 6-hour server shutdown over potential zero-day attacks
BleepingComputer · Sep 25, 2026 · 3 min read

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack.
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
BleepingComputer · Sep 25, 2026 · 4 min read

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path…
Kiteworks urges customers to stop using platform after warning from federal intelligence agencies
The Record · Sep 25, 2026 · 2 min read

Kiteworks urges customers to stop using platform after warning from federal intelligence agencies

Frank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt to target some Kiteworks systems for…
Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings
The Record · Sep 25, 2026 · 1 min read

Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings

Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares with vendors and building an expansive risk management team charged with tracking vendors’ compliance with data…
Elementor WordPress flaw lets attackers create admin accounts
BleepingComputer · Sep 25, 2026 · 2 min read

Elementor WordPress flaw lets attackers create admin accounts

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts.
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
BleepingComputer · Sep 25, 2026 · 2 min read

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2.
BleepingComputer · Sep 25, 2026 · 1 min read

Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions

Anthropic now allows you to run Claude Code via cloud sessions without signing up for the research preview, and it's offering up to $250 in free usage credits, so more users can give it a try.
Crypto CEO accuses North Korea of stealing $387 million from Bitget platform
The Record · Sep 25, 2026 · 2 min read

Crypto CEO accuses North Korea of stealing $387 million from Bitget platform

The CEO said the company has a User Protection Fund that has over $464 million and those funds will be used to cover the losses.
Cyberattack hits Welsh police force, may have affected staff data
The Record · Sep 25, 2026 · 1 min read

Cyberattack hits Welsh police force, may have affected staff data

Dyfed-Powys Police in Wales said a cyberattack affecting the force disrupted some non-emergency systems and may have compromised staff information.
OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex
BleepingComputer · Sep 25, 2026 · 2 min read

OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex

OpenAI appears to be preparing a new ChatGPT Pro Max subscription that could cost $500 per month, but it's unclear when it'll begin rolling out.