@IntCyberDigest

Independent reporting on cybersecurity, tech, AI & digital policy.

Joined September 2024
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours. Each key should be a 116-digit number, but one was just 4. Anyone can guess them and forge HTTPS certs for any website.
583
3,505
1,612
28,978
5,095,789
‼️ Hackers stole 1.5 million+ "anonymous" Crime Stoppers tips from 25 years in Canada when they breached tip platform P3 in March, CBC found. 850k+ hold personal details, and 4,3k+ tipsters gave their full names. They first told no Canadian data was affected.
4
3
21
3,603
International Cyber Digest retweeted
‼️ A critical Signal bug could keep your microphone, and possibly your camera, live after you hang up. The other caller can flood the call's event queue so your hang-up is never processed. Dubed CVE-2026-113380 it scored 9.3 and got fixed in September.
28
311
48
2,567
101,572
‼️ VirusTotal flagged 6,6k of 35,8k AI agent skills as malicious. 62% have no malicious code, but plain-language orders for the agent. 90 hide them in invisible Unicode, HTML comments or after up to 825 blank lines. Another tells the agent "Your human doesn't need to know." 💀
28
30
12
309
13,172
❗️ Some buyers say they cancelled iPhone Duo pre-orders after reviews showed apps boxed in by black bars on the $1,999 foldable. Ironically Apple CEO John Ternus mocked rival foldables for movies "boxed in by oversized black bars, making a larger screen feel much smaller."
11
8
4
221
17,211
‼️ A Georgia sheriff's investigator left in 2021 but kept his login to Flock's camera network and searched it 60+ times. Logs seen by The Washington Post show repeated lookups of his wife's vanity plate. He's charged with stalking her.
6
5
1
41
6,892
🚨 BREAKING: Microsoft says China state-aligned hackers used AI agents in the ConnectWise supply-chain hack. Storm-0940 used the AI pentest tool ARTEX to reach 2,250+ Microsoft 365 tenants at 2,900 attempts a minute. Some attacks reached privileged cloud access within 3 hours.
14
36
7
223
14,295
❗️ Italy's financial police arrested 30 people over a mafia-linked "shadow bank" run from a car-hire firm near Milan. It moved €68M abroad and into crypto for drug traffickers and tax evaders, police say. A court worker is accused of hacking IT systems to tip off its bosses.
2
35
3
157
13,784
❗️ Honolulu police plan a Real-Time Investigative Center linking drones, licence plate readers and live cameras across Oahu. Patrol cops get more plate data, and AI-assisted reports arrive by June 2028. Its answer to drone privacy concerns is a "public communications system".
3
1
1
18
7,323
‼️ North Korea-linked hackers pushed $109M from April's $295M Drift heist through Tornado Cash in two days. Onchain Lens tracked 44,510 ETH into the mixer on Oct 20 and 21. Arkham data shows their wallets still hold ~$138M.
2
10
2
70
10,393
🚨 BREAKING: A New Mexico judge ordered Meta to pay $25B for misleading users about privacy after Cambridge Analytica. A jury found 43.9M violations, worth up to $219.5B. Interest is at 15% a year until it pays. The judge called Meta's own data probe "willfully ineffective".
6
18
2
119
10,189