❗️ A developer hid a Bitcoin key on a PHP server left unpatched against PHP2Shell, the critical flaws fixed on Oct 21, and dared anyone to steal it.

17 hours on, the wallet holds ~$2,000 and nobody has taken it.

The developer says someone is crashing PHP but "still no RCE yet".

https://news.ycombinator.com/item?id=50224916

❗️ eToro published its reply to Apple's App Store reviewers as the release notes for its iPhone trading app.

It tells Apple a background audio setting they flagged "was included by mistake and is not tied to any functionality in the app."

The reply is still on the App Store. https://t.co/Hcc0BrIMnl

https://x.com/IntCyberDigest/status/2114484398536204752

❗️ A tourist lost their Apple Watch charger in China, bought another at an Apple Store, and the US watch refused it as a "country-specific charger".

Apple says Chinese wireless chargers sold there only charge local models.

They cost CN¥279, ~$42, and can't fast charge.

Source: https://support.apple.com/en-us/120920

And: https://www.reddit.com/r/AppleWatch/comments/1xf0vyx/annoying_official_chinese_charger_doesnt_charge/

https://x.com/IntCyberDigest/status/2114498741805645872

❗️ A Nissan Rogue owner says OpenAI's GPT-6 Astra turned his Lenovo laptop into a fake phone that his car's Bosch head unit accepted for Android Auto.

They are now probing its bootloader in a bid to flash Android 13 onto the factory unit.

He puts the odds of bricking it at 65%. https://t.co/SjMxNbAeuq

Source:
r/CarHacking
u/Elegant_Cantaloupe_8

https://x.com/IntCyberDigest/status/2114528940782149823

❗️ Framework cut the RAM on some Laptop 13 Pro pre-orders after its memory supplier more than doubled prices. Later 64GB orders were downgraded to 32GB, some 32GB orders to 16GB.

One buyer says they paid $800 to get back the RAM they ordered, then got a laptop that won't boot.

They say a bent pin on the memory interposer leaves it reporting no RAM, and the replacement part support promised still hasn't shipped 11 days later.

Support told them Framework is changing warehouses.

Source: https://www.reddit.com/r/LinusTechTips/comments/1xerx0x/man_this_feels_bad_and_i_hope_i_am_the_only/

https://x.com/IntCyberDigest/status/2114546053877727404

‼️ Korean Air and Asiana say booking data was exposed through Amadeus, which runs reservations for airlines worldwide.

An intruder used one Amadeus account's login, sometime between August 2023 and September 2026.

Amadeus is still counting how many passengers are affected. https://t.co/dvS5BjSOiA

Source: https://t.co/6WvvAGmrgV

https://x.com/IntCyberDigest/status/2114559140240474189

❗️ A Chinese spyware kit called uCreator hides in repackaged Telegram, WeChat and GCash apps.

In Telegram it can read chats and grab the 2FA password in cleartext, researcher Ovi found.

Its makers left their backend and the names of ~3 dozen developers on an open GitLab server. https://t.co/VlB550anya

https://x.com/IntCyberDigest/status/2114641502450184562

🚨 BREAKING: South Korean police arrested a self-taught hacker accused of using AI to breach 60 firms in six weeks.

Police say his seven-person ring stole 8.2M records from 90+ targets, hospitals among them, and demanded 360M won.

Only one paid. It sent 300,000 won, about $210. https://t.co/J09lgUkEFC

https://x.com/IntCyberDigest/status/2114656531664843175

‼️ Japan's PM Takaichi is convening ministers to order emergency cyber measures after hackers hit GMO Internet and demanded $50M.

GMO wants Tokyo to use a law in force since 1 October that lets police and the military hack into and disable attack servers.

GMO refuses to pay.

https://x.com/IntCyberDigest/status/2114689499649470629