Dark Web Informer

‼️ Footage of the LeakBase domain administrator getting arrested in Taganrog, Russia.

Movie Fact: In Hackers (1995), Matthew Lillard’s character, “Cereal Killer,” spends nearly the entire film without touching a computer. The only exception is a brief, one-second moment just before his famous “tension breaker” scene at Grand Central Station.

CZ says Binance will cover the losses.

RT @DarkWebInformer: Major Tor Browser update to v16. Tor Browser 16.0 is a major stable update built on Firefox ESR 153, bringing current Firefox security fixes, redesigned settings, an updated built-in manual, improved Tor connection handling and additional anti-fingerprinting protections. It also updates Tor to 0.4.9.14 and NoScript, while ending support for 32-bit x86 Linux and Android devices and Android versions older than 8.0.

This.

Btw polymarket and kalshi founders should be in prison

What a month.

Best Cybersecurity Awareness Month ever. 😭

4.

$5 Billion being tracked right now. 😬

Binance has made an announcement saying they are looking into the security issue. 👇

RT @DarkWebInformer: Binance hacker can be tracked on Arkham:

monero:native

RT @DarkWebInformer: $3.5 Billion via

Total hacked is around $3.5B now across multiple chains…

Ongoing: Binance possibly drained for $2.77 Billion.

ALERT: Binance has possibly been hacked. 👇

Unconfirmed, but possibly massive binance hack. Entire Binance wallet drained into new EOA. Contract call was funded by Tornado Cash

‼️🇦🇷 Buenos Aires Student Database Leak Claim Lists 1.7 Million Enrollment Records

🚨 Critical Linux kernel TCP flaw enables remote root code execution; CVE-2026-98432 A race condition in the Linux kernel’s IPv4 TCP implementation can trigger a use-after-free before application authentication, potentially allowing an unauthenticated remote attacker to leak kernel memory, corrupt memory or crash the system. Anthropic says Claude developed a working exploit that executed attacker-chosen commands as root against Linux servers with a Multipath TCP listener. The exploit took approximately 53 minutes to complete during testing and has not been publicly released. ⠀ • CVSS: 9.8 Critical, according to the Linux kernel CVE team • Affected: Linux kernels beginning with version 4.4 • Fixed: 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10 and 7.3 • Attack requirements: Network access, no credentials and no user interaction • Exploitation status: No known attacks in the wild ⠀ Ubuntu and Red Hat Enterprise Linux had not released corrected kernel packages as of October 29. Debian, Oracle Linux, Amazon Linux and SUSE have released fixes for at least some affected branches. Distribution severity ratings differ substantially. Red Hat rates the flaw 5.9 because it considers the race difficult to win and describes denial of service as the most likely practical impact.

Source:

RT @DarkWebInformer: 🚨 Zero-click “SMS of Death” flaw can crash Android phone services A researcher has disclosed an unpatched Android vulnerability that allows a malformed WAP Push SMS to silently crash the process, dropping active calls and temporarily disabling cellular service without any interaction from the victim. The message does not appear in the inbox, and carrier redelivery can repeatedly trigger the crash. The researcher also found that sending multiple messages rapidly could corrupt the SMS dataset, leaving telephony services crashing after every reboot. ⠀ • CVE: None assigned • Attack vector: Remote WAP Push SMS • User interaction: None • Impact: Denial of service, dropped calls and possible persistent loss of telephony • Tested: Pixel 9 and multiple Samsung Galaxy and A-series devices • Patch status: None available • Vendor status: “Won’t Fix” and classified as a non-security issue, according to the disclosure ⠀ The researcher reported the flaw to Google in May and publicly disclosed it on October 29 after the report and subsequent appeals were rejected. There is currently no evidence that the vulnerability is being exploited in the wild.

🚨🇩🇴 Edesur Dominicana customer data allegedly leaked, over 500,000 records exposed Edesur Dominicana, an electricity distribution company in the Dominican Republic, has been named in a data leak by the actor "K3RN3L_P4N1C". The dataset reportedly contains over 500,000 records, including customer names, national identification numbers, residential addresses, phone numbers, email addresses, account statuses, and outstanding electricity debts. The actor has published a sample of approximately 1,000 records and is offering additional information through private messages. Claim is currently unverified. 💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it.

Our teams are aware of reports of a potential security issue and are actively investigating. At this stage, we have not confirmed any impact to user funds. Our security teams are reviewing all relevant information with urgency, and we will provide updates through official Binance channels as soon as we have verified information. Users should remain cautious of scams and should not trust unofficial links, messages, or requests for account information.