Independent reporting on cybersecurity, tech, AI & digital policy.
Joined September 2024
- Tweets10K
- Following266
- Followers258K
- Likes9.8K
Pinned Tweet
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
‼️ BREAKING: Trend Micro posted several unpatched Linux kernel flaws to public mailing lists.
Two are critical remote code execution bugs in the kernel's SMB server, and one includes proof-of-concept code.
Linux maintainer Greg told them to "fix your submission process."
Source: phoronix.com/news/LKML-New-T…
‼️ A low-skill hacker used a jailbroken DeepSeek V4 to breach an Indian public university and steal 5,200+ student and faculty records, Unit 42 says.
The AI agent even drafted a "NEXT EXPLOIT OPPORTUNITIES" plan.
Unrelated criminals now run the same cheap DeepSeek setup.
Source: unit42.paloaltonetworks.com/…
International Cyber Digest retweeted
‼️ BREAKING: North Korea has been largely offline for more than a day.
NetBlocks confirms the outage. NK News says nearly every .kp site has been down or unstable, from state news agency KCNA to national airline Air Koryo.
The cause is unknown, and nobody has claimed an attack.
❗️ Crypto mixer Railgun ignored a US lawsuit claiming it laundered North Korea's stolen crypto, and is now in default.
The plaintiffs are victims and families holding $865M in US terrorism judgments against North Korea.
Courts found it abducted a US permanent resident pastor in China in 2000 and tortured him to death, and backed Hezbollah's 2006 rocket attacks on Israel.
They say Railgun should have frozen North Korea's funds so they could seize them.
The FBI says North Korean hackers laundered $60M+ through Railgun in January 2023. The suit claims ~70% of the money it handled was North Korea's.
❗️ San Francisco police signed a Flock Safety contract that keeps licence plate data for 365 days, released records show
The year of storage costs a one-time $273,500.
Flock's own fact sheet in the same records says it deletes all data after 30 days by default.
‼️ Hackers stole 1.5 million+ "anonymous" Crime Stoppers tips from 25 years in Canada when they breached tip platform P3 in March, CBC found.
850k+ hold personal details, and 4,3k+ tipsters gave their full names.
They first told no Canadian data was affected.
Source: cbc.ca/news/investigates/can…
International Cyber Digest retweeted
‼️ A critical Signal bug could keep your microphone, and possibly your camera, live after you hang up.
The other caller can flood the call's event queue so your hang-up is never processed.
Dubed CVE-2026-113380 it scored 9.3 and got fixed in September.
‼️ VirusTotal flagged 6,6k of 35,8k AI agent skills as malicious.
62% have no malicious code, but plain-language orders for the agent.
90 hide them in invisible Unicode, HTML comments or after up to 825 blank lines. Another tells the agent "Your human doesn't need to know." 💀
❗️ Some buyers say they cancelled iPhone Duo pre-orders after reviews showed apps boxed in by black bars on the $1,999 foldable.
Ironically Apple CEO John Ternus mocked rival foldables for movies "boxed in by oversized black bars, making a larger screen feel much smaller."
‼️ A Georgia sheriff's investigator left in 2021 but kept his login to Flock's camera network and searched it 60+ times.
Logs seen by The Washington Post show repeated lookups of his wife's vanity plate. He's charged with stalking her.
Source: washingtonpost.com/technolog…
