Solar inRights 3.11 Automatically Blocks Corporate Accounts Whose Passwords Appear in Dark Web Leaks
GC Solar has released Solar inRights 3.11, the latest version of its identity and access management solution that can automatically detect and neutralize corporate credentials exposed in data breaches and dark web dumps.
The system is now tightly integrated with the company’s Solar AURA external-threat monitoring service. Solar AURA continuously scans open sources and the dark web for employee login-password combinations; when matches are found, Solar inRights checks whether those same credentials are still valid inside the organization’s internal systems.
If a leaked pair is confirmed as active, the platform immediately blocks the account and notifies the information-security team, dramatically shortening the window between credential exposure and remediation.
The real-world attack scenario is straightforward: an employee reuses a corporate email address and a familiar password on an external website; that site is later breached, the credentials appear on underground forums, and an attacker tests them against the company’s VPN, mail, or cloud portals. Because the login looks legitimate, traditional perimeter defenses often fail to stop it.
According to Solar’s research, one large Russian organization had more than 600 unique corporate accounts circulating in public and shadow sources at any given time. Only around 4 percent of those records directly pointed to an ongoing infrastructure compromise, yet the remainder remain dangerous because of widespread password reuse.
Supporting statistics from Yandex Cloud show that the use of valid stolen credentials featured in 54 percent of more than 25,000 attack attempts against cloud and hybrid infrastructures during the first half of 2025.
Before the automated workflow introduced in version 3.11, security teams often had to correlate dark-web findings with internal directories manually, allowing days or weeks to pass between discovery and blocking. The new release aims to reduce that interval to a minimum.
In addition to the leak-response capability, Solar inRights 3.11 includes enhancements to search functions, request filters, and pre-built integration templates for Active Directory, Exchange, and 1C.
The core value of the update, however, lies in its proactive stance: the password may never be used because the door is already closed.
Related articles
Click to Pray App Exposed Personal Data of 719,000 Users Through Unprotected API Endpoint
Security researcher BobDaHacker discovered an IDOR vulnerability in the official Click to Pray application run by the Pope's Worldwide Prayer Network. The flaw allowed anyone to retrieve full user profiles, including names, emails, countries, and birth dates, by simply incrementing numeric user IDs in API requests. No authorization checks or rate limits were present on the endpoint despite the service holding data for over 719,000 registered accounts. The researcher reported the issue to nine contacts in January 2026 but received no response for seven months. Dark Reading independently verified the exposure before publication, after which the endpoint was quickly restricted. The same service had suffered similar authorization failures in 2019 involving PIN code exposure through its eRosary application. The case highlights persistent gaps in object-level authorization and responsible disclosure channels at the Vatican-backed platform.
Measuring Data Leak Risk by Days of Silence Rather Than Megabytes in Cloud Environments
A financial expert turned security specialist argues that the true cost of data leaks in cloud offices stems not from the volume of exposed files but from the duration they remain undetected. The article details how routine actions such as making documents public, forwarding emails externally, or changing passwords can silently expose sensitive information in platforms like Yandex 360 without triggering any alerts. It warns against blanket prohibitions that push risky behavior into unmonitored channels like personal email or messengers, reducing visibility to zero. Instead, the recommended approach focuses on real-time event-driven notifications combined with automated remediation to minimize the window of exposure. The piece provides a detailed checklist for evaluating monitoring tools, including immediate reaction capabilities, self-healing actions, regular overview reports, and proof of system health. Emphasis is placed on secure integration via OAuth, data residency compliance, and the importance of treating employees as hurried professionals rather than malicious actors.
Russian Interior Ministry Opens Five Criminal Cases Against 'Glaz Boga' Analog Platforms Selling Personal Data of Russian Citizens
The Russian Ministry of Internal Affairs (MVD) has initiated five criminal investigations following the discovery of online platforms that sold personal data of Russian citizens, operating on the same model as the notorious 'Glaz Boga' service. These platforms allowed users to pay for access to detailed biographies and confidential information compiled into multiple files, including passport details, bank account records, and other sensitive personal information. The cases are being investigated under Article 272.1 of the Russian Criminal Code, which addresses the illegal use, transfer, collection, and storage of computer information containing personal data. Authorities have seized the servers of the implicated services and are currently analyzing their contents to gather evidence, although the specific names of the platforms, the number of clients, and the volume of data sold remain undisclosed. The developments highlight how repeated data leaks have transformed personal information into a marketable commodity traded on underground marketplaces, prompting law enforcement action against the operators responsible for distributing such data.
Hacker Leaks Suno Source Code Exposing Massive Scraping of 2 Million YouTube Music Tracks and Customer Data Breach
A hacker known as ellie.191 has leaked the internal source code of Suno, one of the largest AI music generation services, to 404 Media, revealing extensive unauthorized scraping of copyrighted material from YouTube Music, Deezer, Genius, and other platforms. The leaked files, believed to date from 2023 and 2024, detail how Suno collected over 2 million music tracks and hundreds of thousands of hours of audio, including 152,000 hours from YouTube Music alone, along with 420,000 podcasts totaling nearly 1 million hours. Additional datasets came from Pond5, Jamendo, Freesound, MuseScore, and other libraries, with the company using Bright Data proxies to bypass restrictions and tools to isolate vocals from instrumental tracks. The breach also exposed hundreds of thousands of customer records, including emails, phone numbers, and partial Stripe payment data, which multiple users have already confirmed as accurate. Suno claims the incident was limited, occurred in November 2025, and involved only outdated code, while denying any leak of sensitive payment information. The hacker gained access via an employee account compromised by the Shai-Hulud worm, which stole GitHub and cloud credentials, and stated the attack was driven purely by curiosity rather than a specific motive. This disclosure lends support to ongoing lawsuits from the Recording Industry Association of America alleging direct copyright infringement by Suno.