BTC$84,525-0.20% LTC$69.49+1.91% XMR$541.13-0.71%
TorPortal TorPortalMarkets, mirrors, dark web news

Tor and dark web news

Stories from trusted sources, picked for people who actually use Tor.

Latest dark web stories

Russia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions
The Record · Jul 12, 2026 · 5 min read

Russia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions

The allies blamed Center 16, the FSB’s signals intelligence arm, for acts of attempted cyber sabotage targeting Poland’s energy sector and water treatment facilities, alongside “a wide range of malicious cyber activities with growing…
BleepingComputer · Jul 12, 2026 · 1 min read

Claude Fable 5 stays free for paid users until July 19 as Anthropic buys more time

Anthropic has just extended access to Claude Fable 5 for paid subscribers until July 19, giving you another week to keep using the most powerful model.
RedHook Android malware now uses Wireless ADB for shell access
BleepingComputer · Jul 12, 2026 · 1 min read

RedHook Android malware now uses Wireless ADB for shell access

A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel way to gain shell-level privileges without requiring a computer connection.
Australia warns of global campaign targeting vulnerable CMS platforms
BleepingComputer · Jul 11, 2026 · 1 min read

Australia warns of global campaign targeting vulnerable CMS platforms

The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content management systems (CMS) and plugins.
'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
BleepingComputer · Jul 11, 2026 · 1 min read

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' slipped past AI code reviewers CodeRabbit and Bugbot, which never open image files at all, then convinced a…
New U-Boot flaws could enable stealthy firmware attacks
BleepingComputer · Jul 10, 2026 · 1 min read

New U-Boot flaws could enable stealthy firmware attacks

Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections and…
Europe revives law allowing big tech to scan for CSAM
The Record · Jul 10, 2026 · 2 min read

Europe revives law allowing big tech to scan for CSAM

The law known as Chat Control 2.0 passed in the European Parliament, permitting companies like Google, Meta and Microsoft to scan users' messages to hunt for CSAM.
Ryuk ransomware member pleads guilty in the US, faces 15 years in prison
BleepingComputer · Jul 10, 2026 · 1 min read

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

A 34-year-old Armenian man has pleaded guilty to hacking U.S. companies and deploying the infamous Ryuk ransomware to encrypt their systems.
Ryuk operator pleads guilty; Blackcat/AlphV conspirator gets nearly 6-year sentence
The Record · Jul 10, 2026 · 2 min read

Ryuk operator pleads guilty; Blackcat/AlphV conspirator gets nearly 6-year sentence

One man accused of deploying Ryuk ransomware pleaded guilty Wednesday in an Oregon federal court to conspiracy and computer fraud, while another man received a 70-month federal prison sentence in a Florida court for helping the…
License plate cameras may be next target after Supreme Court reins in location tracking
The Record · Jul 10, 2026 · 4 min read

License plate cameras may be next target after Supreme Court reins in location tracking

If a warrant is ultimately needed for ALPR searches, experts say, it would radically limit how the networks of cameras can be used and would change modern policing.
Police suspects Dutch hackers were involved in Odido breach
BleepingComputer · Jul 10, 2026 · 1 min read

Police suspects Dutch hackers were involved in Odido breach

The Dutch National Police (Politie) says it has found "strong indications" that Dutch hackers have been involved in a February breach at the telecommunications provider Odido.
Progress urges ShareFile admins to shut down servers over “credible” threat
BleepingComputer · Jul 10, 2026 · 1 min read

Progress urges ShareFile admins to shut down servers over “credible” threat

Progress Software is emailing ShareFile customers who use Storage Zone Controllers to immediately shut down their servers after identifying what it describes as a "credible external security threat" targeting the on-premises secure…
Hackers exploit critical auth bypass in Gitea Docker image
BleepingComputer · Jul 10, 2026 · 1 min read

Hackers exploit critical auth bypass in Gitea Docker image

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators.
Money launderer accused of stealing seized crypto while in prison
BleepingComputer · Jul 10, 2026 · 1 min read

Money launderer accused of stealing seized crypto while in prison

A Bulgarian national has been charged with stealing $290,000 in government-seized cryptocurrency while serving 121 months in prison for helping launder millions stolen from American fraud victims.
The Replicant in Your Directory: AI Agents and the Identity Security Gap
BleepingComputer · Jul 10, 2026 · 1 min read

The Replicant in Your Directory: AI Agents and the Identity Security Gap

AI agents are accelerating the growth of non-human identities, making it harder for organizations to understand what exists, who owns it, and what it can access. Netwrix explains why stronger visibility and identity governance are…