DarkWebDaily.Live
DarkWebDaily.Live has been listed as a darknet investigation resource by OSINTME, a trusted open-source intelligence platform maintained by cybersecurity professional Maciej Makowski.
Oracle
India's National Computer Emergency Response Team (NCERT) has issued a cyber alert regarding an alleged Oracle Cloud breach involving over six million federated login credentials. While Oracle denies the incident, dark web evidence and ongoing phishing attacks suggest otherwise.
Open Source
Thunderbird is quietly launching a suite of open-source services Thundermail, Appointment, Send, and Assist designed to replicate the integration of Gmail and Office365 without the surveillance or vendor lock-in.
VPN
A fifth of the most popular iOS VPN apps are quietly controlled by Chinese companies, including one blacklisted by the U.S. military. The deception runs deep, routed through shell firms and foreign registrations to obscure links to Beijing.
Cryptocurrency
Another day, another so-called "secure" blockchain project gets gutted. This time, it’s UPCX—a self-proclaimed financial service platform running on its own blockchain.
triada malware
Over 2,600 Android devices were infected by a preloaded version of the Triada malware in March 2025. The malware, embedded during manufacturing of counterfeit smartphones, grants full remote access, enabling crypto theft, social media hijacking, and botnet control.
github
GitHub quietly dropped a bomb: 39 million secrets were leaked on their platform in 2024 alone. API tokens, credentials, private keys exposed and weaponized in minutes by threat actors.
Darknet
Despite institutional claims of disruption, darknet drug trade hit $2.4 billion in 2024. Messaging platforms like Telegram and WhatsApp are misrepresented.
osint
India’s state machinery is targeting OSINT platforms for exposing the very data its agencies routinely mishandle. The crackdown aims not to protect citizens' data—but to criminalize decentralized intelligence gathering.
chrome
Chrome 135 and Firefox 137 shipped this week with patches for over 20 security flaws, including high-severity memory exploits that could enable remote code execution. Despite no public evidence of active exploitation, the nature of these bugs makes delayed updates a security risk.
AI
OpenAI has quietly rolled out OpenAI Academy, an expansive educational platform designed to train users across industries in AI fundamentals, tools, and real-world implementation.
GrapheneOS
GrapheneOS replaced its outdated European infrastructure with a high-performance 25Gbps server sponsored by Macarne. This move directly addresses overloaded bandwidth during major Android updates and positions the project for aggressive user growth.