Threat actor claims a 49 GB Solidgate-related breach exposing 170 merchant API keys.

Upcoming - XTI Threat Time Machine

Investigate the internet as it existed at any point in time.

Select a target and a date — XTI reconstructs its historical threat state across exposed credentials, underground activity, infrastructure, breaches, identities, malware, and threat-actor relationships.

FISearch Max Tier access

KodexGlobal Database Breach Claim - Threat actor Iucy claims to be selling a KodexGlobal database containing 251K+ user accounts and 1.28M+ request logs.

Status: Unverified — no public confirmation from KodexGlobal at this time.

Multiple credentials linked to commercial and AWS GovCloud Bedrock environments were observed in a private Discord channel.

A threat actor claims to be selling an active Agent-level Kodex account with request intake, notifications, company directory, and reporting access

FireIntel now provides access to 23.7B+ infostealer records.

raidforums.com forum threads and posts are now searchable through XTI.

You can now integrate FireIntel’s white-labeled IntelX endpoint directly into your service or workspace:

https://new.fireintel.net/api-playground

Threat actor claims to be selling access to a U.S. software company, allegedly including GitHub, CI/CD, Snyk keys, and Databricks tokens.

Threat actor claims to have leaked 7.2 GB of internal tagada.io data, allegedly including customer records, transaction metadata, API structures, webhooks, and application logs.

Threat actor claims to be selling an alleged Transfast/Mastercard database containing 11M+ records, including phone numbers, transaction confirmations, and money-transfer details.

Something different is taking shape inside FireIntel.

DDW PathProof and Shinkai DDW (Powered by GPT Daybreak Red) are coming soon as part of FireIntel DDW FUSE — built to move intelligence beyond search, toward deeper analysis, validation, and discovery.

This isn’t another feature update.

It’s a new intelligence layer for FireIntel.

Card BIN monitoring is now available in FireIntel XTI, with automated watches and real-time exposure alerts.

OCR Search is coming next to FireIntel.

Search and discover intelligence directly from images, screenshots, scanned documents, and other visual content.

Threat actor Zerotrace61 claims to have leaked an internal SpaceX Starshield Constellation technical baseline and architecture document detailing system design, orbital architecture, satellite subsystems, payload integration, communications, and mission planning.

A threat actor on DarkForums is offering an active VirusTotal Enterprise account with GTI access and a 10M quota for $1,000 in XMR/BTC, claiming a 6-month guarantee.