@IntCyberDigest
Account based inEurope!
About this account
- Account based in
- Europe
- Connected via
- Europe App Store
X says this location may be affected by a proxy or VPN.
Account-level information from X, not a live location or the device used for a specific post.
Independent reporting on cybersecurity, tech, AI & digital policy.
Joined September 2024
- Tweets10K
- Following266
- Followers258K
- Likes9.8K
Pinned Tweet
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
‼️ A low-skill hacker used a jailbroken DeepSeek V4 to breach an Indian public university and steal 5,200+ student and faculty records, Unit 42 says.
The AI agent even drafted a "NEXT EXPLOIT OPPORTUNITIES" plan.
Unrelated criminals now run the same cheap DeepSeek setup.
Source: unit42.paloaltonetworks.com/…
International Cyber Digest retweeted
‼️ BREAKING: North Korea has been largely offline for more than a day.
NetBlocks confirms the outage. NK News says nearly every .kp site has been down or unstable, from state news agency KCNA to national airline Air Koryo.
The cause is unknown, and nobody has claimed an attack.
❗️ Crypto mixer Railgun ignored a US lawsuit claiming it laundered North Korea's stolen crypto, and is now in default.
The plaintiffs are victims and families holding $865M in US terrorism judgments against North Korea.
Courts found it abducted a US permanent resident pastor in China in 2000 and tortured him to death, and backed Hezbollah's 2006 rocket attacks on Israel.
They say Railgun should have frozen North Korea's funds so they could seize them.
The FBI says North Korean hackers laundered $60M+ through Railgun in January 2023. The suit claims ~70% of the money it handled was North Korea's.
❗️ San Francisco police signed a Flock Safety contract that keeps licence plate data for 365 days, released records show
The year of storage costs a one-time $273,500.
Flock's own fact sheet in the same records says it deletes all data after 30 days by default.
‼️ Hackers stole 1.5 million+ "anonymous" Crime Stoppers tips from 25 years in Canada when they breached tip platform P3 in March, CBC found.
850k+ hold personal details, and 4,3k+ tipsters gave their full names.
They first told no Canadian data was affected.
Source: cbc.ca/news/investigates/can…
International Cyber Digest retweeted
‼️ A critical Signal bug could keep your microphone, and possibly your camera, live after you hang up.
The other caller can flood the call's event queue so your hang-up is never processed.
Dubed CVE-2026-113380 it scored 9.3 and got fixed in September.
‼️ VirusTotal flagged 6,6k of 35,8k AI agent skills as malicious.
62% have no malicious code, but plain-language orders for the agent.
90 hide them in invisible Unicode, HTML comments or after up to 825 blank lines. Another tells the agent "Your human doesn't need to know." 💀
❗️ Some buyers say they cancelled iPhone Duo pre-orders after reviews showed apps boxed in by black bars on the $1,999 foldable.
Ironically Apple CEO John Ternus mocked rival foldables for movies "boxed in by oversized black bars, making a larger screen feel much smaller."
‼️ A Georgia sheriff's investigator left in 2021 but kept his login to Flock's camera network and searched it 60+ times.
Logs seen by The Washington Post show repeated lookups of his wife's vanity plate. He's charged with stalking her.
Source: washingtonpost.com/technolog…
‼️ BREAKING: The EU opened a formal investigation into Booking com over fake listings and phishing scams.
Scammers list homes they don't own or hijack host accounts to ask guests for more money.
An EU official called what Booking has done "absolutely substandard".
Source: digital-strategy.ec.europa.e…
🚨 BREAKING: Microsoft says China state-aligned hackers used AI agents in the ConnectWise supply-chain hack.
Storm-0940 used the AI pentest tool ARTEX to reach 2,250+ Microsoft 365 tenants at 2,900 attempts a minute.
Some attacks reached privileged cloud access within 3 hours.
Source: microsoft.com/en-us/security…
