‼️🇮🇱 A threat actor is allegedly selling a combination of 36 Israeli databases totaling 9,200,000 rows (3GB decompressed) across 33 txt/csv files.

The data allegedly includes databases from Israelpost.co.il, Bezeq.co.il, Isrotel.com, Arkia.co.il, and 32 additional Israeli hotel websites.

Price: $10,000.

‼️ CVE-2026-20127: Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access.

PoC: https://github.com/zerozenxlabs/CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE

"This repository contains a working proof-of-concept exploit for CVE-2026-20127, a critical pre-authentication vulnerability in Cisco Catalyst SD-WAN Controller (formerly vSmart) and Catalyst SD-WAN Manager (formerly vManage) that has been actively exploited in the wild since 2023."

‼️🇯🇴 BD Anonymous targeted the website of Jordan's National Cyber Security Center

‼️🇺🇸 ShinyHunters is warning several hundred companies to pay up or have data leaked from the Salesforce Aura Campaign

They also gave a final warning to Vertex Inc.

‼️🇨🇴 A threat actor from the Nyxar group is allegedly selling 750K records of Colombian citizens from INCODOL (Instituto Colombiano del Dolor), a Colombian pain management healthcare institution.

Exposed data allegedly includes Identificación, Nombre completo, Tipo usuario, Plan cubrimiento, Fecha nacimiento, Sexo, Estado civil, Dirección residencia, Tel. residencia, Ocupación, Empresa, Dirección trabajo, Teléfono trabajo, Acudiente, and Tel. acudiente.

20K sample provided. Price: $200.

‼️🇨🇭 A threat actor is allegedly selling a database breach from Sunrise, Switzerland's second-largest telecommunications provider, offering comprehensive fixed network access and mobile network coverage across the country.

The breach allegedly contains 6M+ customer details including Usernames, PII (payment information), Passwords, Phones, Address, Payment details (not CC included), Plans, Subscriptions, and all data information.

Price: $10,000.

‼️🇲🇽 A threat actor claims to have found the hotel management system of Hotel Lucerna Tijuana, a 5-star hotel in Mexico, fully exposed with no authentication required.

The exposure is still active as of March 2026 and allegedly contains:

▫️Live guest names (78 current occupants)
▫️Room numbers (real-time)
▫️Maid status (Occupied/Dirty, Vacant/Clean)
▫️2+ years of wake-up call logs
▫️Guest names + dates of stay
▫️Call attempt details (answered, busy, no answer)

Stats: 78 live guests as of March 9, 2026, 500+ historical records spanning December 2024 - March 2026.

⚠️ FBI Watchdog - DNS New Domain (A) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.st
Record Type: DNS New Domain (A)
Time Detected: 2026-03-09 18:20:38 UTC

Previous Records:

None

New Records:

185.208.156.66

⚠️ FBI Watchdog - DNS New Domain (MX) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.st
Record Type: DNS New Domain (MX)
Time Detected: 2026-03-09 18:20:40 UTC

Previous Records:

None

New Records:

0 darkforums.st.

⚠️ FBI Watchdog - DNS New Domain (NS) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.st
Record Type: DNS New Domain (NS)
Time Detected: 2026-03-09 18:20:41 UTC

Previous Records:

None

New Records:

ns1.safe-networks.net.
ns2.safe-networks.net.

⚠️ FBI Watchdog - DNS New Domain (SOA) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.st
Record Type: DNS New Domain (SOA)
Time Detected: 2026-03-09 18:20:42 UTC

Previous Records:

None

New Records:

ns1.safe-networks.net. root.cp-01.safe-networks.net. 2026030905 3600 1800 1209600 86400

⚠️ FBI Watchdog - DNS New Domain (TXT) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.st
Record Type: DNS New Domain (TXT)
Time Detected: 2026-03-09 18:20:44 UTC

Previous Records:

None

New Records:

"v=spf1 +a +mx +ip4:185.208.156.66 ~all"

Still working through some bugs & false positives, but this will likely be the main screen you see when you launch the script. I tried to make this version simple to use even for the n00bies. Readme on GitHub will be fully updated on release. Will be available early next week.

‼️ DarkForums has two backup domains in case their main one goes down...

darkforums[.]st
darkforums[.]ru

⚠️ FBI Watchdog - DNS New Domain (A) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.ru
Record Type: DNS New Domain (A)
Time Detected: 2026-03-09 18:45:52 UTC

Previous Records:

None

New Records:

104.21.96.68
172.67.173.254

⚠️ FBI Watchdog - DNS New Domain (NS) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.ru
Record Type: DNS New Domain (NS)
Time Detected: 2026-03-09 18:45:56 UTC

Previous Records:

None

New Records:

johnathan.ns.cloudflare.com.
wren.ns.cloudflare.com.

⚠️ FBI Watchdog - WHOIS Change ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.st
Record Type: WHOIS Change
Time Detected: 2026-03-09 18:46:47 UTC

Previous Records:

name_servers: ['ns1 safe-networks net', 'ns2 safe-networks net']

New Records:

name_servers: ['ns1 safe-networks net', 'ns2 safe-networks net'] → ['johnathan ns cloudflare com', 'wren ns cloudflare com']

‼️ A threat actor is allegedly selling the database of MagicSlides.app, an AI-powered presentation generation platform, containing 2,385,847 unique emails.

The full database is reportedly over 50GB with the users table at 9GB. The data allegedly includes every single document and presentation created on the platform.

Sample provided. Price: $500.

⚠️ FBI Watchdog - DNS Change (SOA) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.su
Record Type: DNS Change (SOA)
Time Detected: 2026-03-09 19:19:20 UTC

Previous Records:

johnathan.ns.cloudflare.com. dns.cloudflare.com. 2398075957 10000 2400 604800 1800

New Records:

johnathan.ns.cloudflare.com. dns.cloudflare.com. 2398568049 10000 2400 604800 1800

⚠️ FBI Watchdog - DNS New Domain (TXT) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence

Domain: darkforums.su
Record Type: DNS New Domain (TXT)
Time Detected: 2026-03-09 19:19:21 UTC

Previous Records:

None

New Records:

"google-site-verification=3iarVV2oDOICgAGp2jEwXSHitAbvb31g75Q61S3911w"