PULSE
LIVE0signals / 24h
FEED
vulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScalervulnKEV agrega CVE-2025-25249 — Fortinet / Multiple ProductsvulnKEV agrega CVE-2026-87491 — Google / Chromium V8vulnKEV agrega CVE-2026-20079 — Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementvulnKEV agrega CVE-2026-75650 — Adobe / Commerce and MagentovulnKEV agrega CVE-2026-81963 — Microsoft / WindowsvulnKEV agrega CVE-2026-86218 — N-able / N-centralvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScalervulnKEV agrega CVE-2025-25249 — Fortinet / Multiple ProductsvulnKEV agrega CVE-2026-87491 — Google / Chromium V8vulnKEV agrega CVE-2026-20079 — Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementvulnKEV agrega CVE-2026-75650 — Adobe / Commerce and MagentovulnKEV agrega CVE-2026-81963 — Microsoft / WindowsvulnKEV agrega CVE-2026-86218 — N-able / N-central
Kalir Brief · Item16 September 2026 · 16:12 UTC
BRIEFLeakhighP68

Full dump of Woflow merchant data platform (12M records) for sale

woflow.com

Detected16 September 2026 · 16:12 UTC
Why it matters

A full dump of Woflow, a US AI-driven merchant data platform, containing roughly 12 million records, is being offered on a raid forum in 2026. Merchant and business contact data at this scale fuels targeted phishing, account takeover and B2B invoice fraud. Defenders in e-commerce/payments should treat the dataset as live and hunt for credential reuse.

MetadataRECORD
CategoryLeak
Severityhigh
Priority score68
Detected16 September 2026 · 16:12 UTC
Related items6
Leak44
Filtración de base de datos del departamento de economía de la Academia Kyiv-MohylaA database belonging to the economics department of Ukraine's Kyiv-Mohyla Academy (economics.ukma.edu.ua) has been posted on a raid forum, likely with staff and student personal data and credentials. The post dates to mid-2026, so it is not fresh. It is outside Latin America but remains a real education-sector breach worth tracking for credential reuse.
1h
Leak28
Base de datos de CPF y datos personales de brasileños a la ventaA DarkForums post is offering a database of Brazilian CPF numbers together with personal details of citizens. The dump is not recent (early 2025) and the scale is unstated, but CPF-linked identity data can fuel fraud, account takeover and synthetic identities. It remains marginally relevant for LATAM defenders because the exposed PII persists long after posting.
2h
Leak50
Venta de pasaportes e identificaciones de Europa, América y AsiaA vendor is selling bulk scans and photos of passports and national IDs covering Europe, America, Asia and the Russian Federation. This is a large identity-document trove that enables fraud, KYC bypass and account takeover, and may include Latin American documents. Defenders should treat it as an identity-fraud risk and monitor for impersonation and document misuse.
3h
Leak38
Fuga de datos de clientes de Baydoner.com (1,3M pedidos)Customer orders and personal data for Baydoner.com, a restaurant chain, totaling roughly 1.3M records, are being offered on the DarkNetArmy forum. The listing is fresh (posted today), which raises the chance the data is current and usable for phishing or fraud. Relevance is limited because the victim is outside the AR-LATAM region.
4h
Leak42
Base de datos de Baker Distributing a la ventaData belonging to Baker Distributing Company, a US HVAC and refrigeration parts distributor, has been listed for sale on the DarkNetArmy forum. The post is only minutes old, indicating a fresh exfiltration or intrusion event rather than a recycled dump. It matters for supply-chain visibility of an industrial distributor, though the victim is outside the AR-LATAM region.
4h
Leak70
Filtración de datos del INSS de España: 3,18M pensionistasA database of 3,184,288 records linked to the Spanish Social Security institute (INSS), covering pensioners, is being sold on the DarkForums marketplace. It exposes names, national ID numbers and benefit/pension details of elderly citizens, a high-value pool for identity theft, pension fraud and social-engineering of public services. Although Spain sits outside LATAM, a government benefits database at this scale is a serious exposure that defenders in Spanish-speaking regions should track.
4h