Pinned Tweet
We keep seeing the same pattern: security teams drowning in alerts from decade-old breaches while fresh threats went unnoticed.
We broke down the credential leak ecosystem and what your team should actually be monitoring:
whiteintel.io/blog/which-cre…
We have released our new report generate feature! Interested in generating dark web exposure reports for your own company? Get yours free, no sign up required: whiteintel.io/check-your-dar…
We are getting ready to release our new feature for generating reports. Why we did not do it until now, not sure. Why we do it now, we don’t know. Thank you for your understanding in this matter.
(Gif is totally unrelated)
Turn off upload_progress. If your app does not have uploads, disabling them should have virtually no affect.
php.ini: file_uploads=0, session.upload_progress.enabled=0
Cloudflare WAF: block multipart/form-data
Patch when it lands. This is just our take. Do your own research.
Disclaimer: We do not know if this finding related to the patch will be dropped today.
... get it while its hot... 😈
> CVE-2026-109618 / CVE-2026-109619 (pre-patch PHP 8.x)
> session.upload_progress UAF
> jackalsyn.com/posts/php-up-2…
> Courtesy of Me, @acd421 & @Archknight23
#CyberSecurity #infosec #php2shell #php
Our new Correlations feature shows the full footprint of an infection, not just the matched record.
Browser history, autofill, extra credentials and live session cookies from the same device. Preview inline or export.
Assess the session hijacking risk with the whole picture.
[EN]
Whiteintel welcomes AIVA Corporation as an official reseller partner in Japan! Our customers in Japan can now access Whiteintel services locally through AIVA.
[JP]
Whiteintelは、株式会社アイヴァ(AIVA Corporation)を日本における正規リセラーパートナーとしてお迎えしました!日本のお客様は、アイヴァを通じて国内でWhiteintelのサービスをご利用いただけるようになりました。
aivacorp.jp/en/aiva-becomes-…
@AIVAcorp
We've launched our new partner and reseller platform.
Want to grow your revenue in the fast-moving dark web monitoring market?
Join our partner program and earn competitive revenue share on every account.
whiteintel.io/become-a-partn…
Whiteintel retweeted
😬 Infostealer data courtesy of @whiteintel_io
🚨🇨🇴 [ACCESS] Colombian National Police and health-system access allegedly compromised
A forum actor using the handle "Keishell" claims to have obtained access to two accounts associated with Colombia's National Police.
The actor says one account has elevated access to a police health-services system, while the second provides access to internal training and course materials.
Claimed access includes:
⠀
• Health services: medications, laboratory results, medical orders and appointment management
• Patient data: clinical records and other health-related information
• Police resources: internal training and course materials
• Account access: two separate compromised accounts, including one described as having high-level permissions
⠀
The actor published screenshots showing access to National Police portals and a medical laboratory report as purported proof.
This claim is currently unverified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
The hype is calm down however, we have released a permanent tool last week to check if your organization was affected from LiteLLM supply chain attack.
If you are affected, you can get a complimentary full report:
whiteintel.io/litellm-exposu…
Replying to @blk014
It’s when the project makers could have a “bug” in the entropy generation for later retrieval.
We are not in Blackhat conference but if you are there, assume that we are there and act like we made good sales talk please.
Whiteintel.io
We finally have a White theme option. Ironically, most of us live in dark mode, our name is White, yet our logo is still mostly dark with just enough white to keep the branding team happy.
We just launched two new capabilities: Stolen Card Monitoring and the Supplier Security Module.
Tracking exposed cards and BINs are now as easy as using a search bar.
And with the Supplier module, you can now have access to the realistic security scores of your suppliers.
whiteintel.io/blog/payment-f…
If you recognize this piece of fine art at first sight, you are experienced enough in credential / cc market intelligence.
A quick product update:
Alongside our upcoming Payment Fraud capabilities, we're also putting the finishing touches on our new Supply Chain Security module.
Looking forward to sharing more soon.
A potential security incident is developing at ServiceNow.
Customers received notifications about a suspicious IP accessing multiple customer tenants. The root cause appears to be a Scripted REST API endpoint that required no authentication by logging activity under the "Guest" user with no actual account. The resource had been in this state since at least 2018, and was only patched last Friday when ServiceNow set the requires_authentication flag to true.
One affected organization works for critical infrastructure. Their internal security team is now conducting a full investigation. The issue was linked to the Australia platform release.
ServiceNow has not issued a public statement and reports are ongoing.
Thread: reddit.com/r/servicenow/comm…
We projected ~2M bin records for the new payment fraud module. We're already at 4M+ with just 18% of the data processed. Nice to see our forecasting model is generating anomalies before the fraud module does.
You asked, and we listened.
A major update is arriving in just 15 days: Payment Fraud Intelligence.
Our newest module helps identify stolen BIN activity in real time, enabling faster action to reduce fraud exposure and prevent financial losses.




















