A developer released VoidAccess, a self-hostable, open-source tool that lets security researchers turn dark-web search queries into structured threat intelligence. It collects data from Tor indexes, paste sites, code forges and security feeds, extracts entities like IOCs and malware, and builds relationship graphs that can be exported in formats such as STIX, MISP and YARA. It is available via pip install and can run locally or as a Docker Compose stack.
github.com
· 2026-10-20
Bloomberg reports that open-weight AI models, which can be run locally and stripped of safety guardrails, are increasingly being used to produce child sexual abuse material. According to the report, these models can be trained on existing CSAM and generate new content offline, making detection by law enforcement difficult, and have spawned large dark web communities around this practice. Child safety expert Rebecca Portnoff told Bloomberg that over 500 open source models are now implicated, up from fewer than a dozen two years ago, while NCMEC-reported incidents of AI-generated CSAM jumped from 67,000 to more than 1.5 million in a year.
futurism.com
· 2026-10-12
Raheim Hamilton, the owner of the now-defunct Empire Market, received a 40-year prison sentence for facilitating over $430 million in illegal transactions on the dark web between 2018 and 2020. The marketplace, which operated as a TOR hidden service, was used primarily for drug sales, including large quantities of fentanyl, cocaine, methamphetamine, and heroin, and attracted over 1.6 million users at its peak.
bleepingcomputer.com
· 2026-10-08
Ardit Kutleshi, 28, has pleaded guilty to running Rydox, an online marketplace that sold stolen identities, login credentials, credit card data and cybercrime tools. Court documents show Rydox facilitated over 7,600 sales of stolen personal data and offered more than 321,000 other cybercrime products to over 18,000 users between 2016 and its 2024 shutdown. Kutleshi was extradited from Kosovo to the US in 2025 after a joint law enforcement operation seized the site's domain and servers in Kuala Lumpur.
bleepingcomputer.com
· 2026-09-25
An Android Authority writer describes shifting to privacy-focused tools like the Brave browser to limit Google's data collection and targeted advertising, after encountering people who dismiss online privacy as unimportant. The piece recounts personal experience with data breaches at retailers that exposed sensitive information such as ID numbers, arguing this shows why data collection risks extend to everyday consumers, not just privacy-conscious tech users.
androidauthority.com
· 2026-09-24
Threat intelligence firm Positive Technologies found that the UAE, Saudi Arabia and Iran accounted for about 67% of Middle East cyberattacks detected via open-source monitoring of Dark Web forums and Telegram channels. Check Point Software Technologies data cited separately shows organizations in the UAE and Saudi Arabia faced roughly 2,700 attacks per week over the past six months, versus a global average of about 2,300.
darkreading.com
· 2026-09-23
Hacking group ShinyHunters says it breached FBI systems and stole personal data on thousands of agents and job applicants, including names, home addresses and phone numbers. 404 Media reported the group first breached an Oracle PeopleSoft HR server before pivoting into an Amazon-hosted government cloud, and the FBI's job application portals appeared defaced and offline. ShinyHunters says the hack is not financially motivated and is demanding the FBI remove a report containing what it calls false allegations about the group.
techcrunch.com
· 2026-09-22
A dark web marketplace called Nexus was found selling access to a database containing roughly 153 million U.S. and Canadian driver's licenses and 3 million travel documents, according to Krebs on Security. The breach appears linked to identity verification firm IDScan, which is now investigating, while the FBI has also opened a probe; the Nexus listing vanished from the dark web after the report but its operators have not claimed to have deleted the stolen data.
lawfaremedia.org
· 2026-09-15
IDScan.net, an identity verification company, disclosed that an unauthorized third party may have accessed customer accounts containing full names and government ID numbers. In response, the company is notifying affected customers and providing free credit monitoring and identity protection services while cooperating with federal law enforcement.
engadget.com
· 2026-09-10
IDScan, an identity verification firm used by rental car companies, retailers and other businesses, faces multiple lawsuits after a dark-web service called Nexus allegedly offered access to over 153 million U.S. and Canadian driver's licenses along with millions of other ID documents. Journalist Brian Krebs traced the leaked data back to IDScan, and the FBI's New Orleans office has reportedly opened an investigation. IDScan has not confirmed a breach occurred or commented publicly on the allegations.
bleepingcomputer.com
· 2026-09-04
A dark web marketplace called Nexus was offering digital scans of over 153 million driver's licenses from the US and Canada, along with 10 million ID cards, 3 million travel documents and half a million medical cards, affecting roughly 170 million people. Journalist Brian Krebs traced the data to a Louisiana-based ID verification firm and found the license of Defense Secretary Pete Hegseth among the leaked files. The FBI has opened an inquiry, and the Nexus service disappeared from the dark web the same day Krebs published his findings.
futurism.com
· 2026-09-03
A dark-web marketplace called Nexus advertised more than 153 million US and Canadian driver's license images, along with millions of ID cards, travel documents and medical cards, before going offline after Krebs on Security exposed it. The listings included not just standard front-and-back scans but infrared and ultraviolet images normally used by businesses to verify document authenticity. The FBI's New Orleans office is reportedly investigating a possible breach at Louisiana-based identity-verification firm IDScan.net, which Nexus claimed as its data source.
techspot.com
· 2026-09-03
GoKawiil