> TritonInfoSec News
Home / Oct 11, 2026 / Story
0
#8 The Hacker News general October 09, 2026 at 09:03 UTC

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

By [email protected] (The Hacker News)

AI Summary

A key-recovery flaw in GoBalance — a tool widely used by dark-web sites for high-availability during DDoS attacks — allows attackers to derive the private Tor key controlling a site's .onion address using only publicly available information. Disclosed by Searchlight Cyber on October 8, the bug enables full .onion address hijacking, letting attackers transparently redirect all visitors to an attacker-controlled mirror.

Read full article → https://thehackernews.com/2026/10/gobalance-flaw-l…

Relevance score: 79.0/100

# More from October 11

  1. 1
    FBI Arrests Founder of Ransomware Negotiation Firm Krebs on Security
  2. 2
    Germany arrests alleged core Qilin ransomware member after extradition BleepingComputer
  3. 3
    Citrix warns admins to patch new NetScaler RCE flaw immediately BleepingComputer
  4. 4
    Unpatched AhsayCBS Vulnerabilities Exploited in the Wild SecurityWeek
  5. 5
    Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories The Hacker News
  6. 6
    Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own The Hacker News
  7. 7
    US Disrupts Chinese State-Sponsored Hacking Tools SecurityWeek
  8. 9
    Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries SecurityWeek
  9. 10
    Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws The Hacker News