‼️ Cisco says its IOS XR routers and Meraki cameras trust eight eMudhra certificate authorities whose private keys were numbers below 256.

Anyone can recover those keys in seconds and forge HTTPS certificates for any website.

Cisco is still investigating its ASA firewalls.

https://x.com/IntCyberDigest/status/2114778585705918779

‼️ Alibaba's Qwen AI tried to upload a file to a cloud bucket in Beijing while writing a malware detection rule, Cohere says.

Its reasoning said it would call no tools. Then it read the machine's DNS settings and tried the upload.

Their sandbox blocked it.

https://x.com/IntCyberDigest/status/2114793937021898786

‼️BREAKING: Keystone will destroy 18,835 unsold crypto wallets after a hacker stole the key that proves they're genuine.

The hacker who breached crypto wallet maker Keystone also stole the key.

Anyone with that key could build fakes that pass Keystone's own check, the company says.

Keystone had promised to erase buyer data after 180 days, but its deletion tool "did not operate reliably." Names and addresses in 25,964 buyer records were exposed, some from 2024.

https://x.com/IntCyberDigest/status/2114807165802426479

❗️ LINE's end-to-end encryption lets a malicious server silently replay, reorder or block messages, Aarhus University researchers say.

Colluding users can forge who sent a message, and stickers leak plaintext.

LINE's owner said last year that "no special action is required."

https://x.com/IntCyberDigest/status/2114809689200320955

‼️ UPDATE: Apple admits an issue with the inner display of some $1,999 iPhone Duos.

Owners describe a crunch as they unfold it, then a crack along the crease within hours or days.

Apple says only "a small number" are affected and has not said what causes it.

https://x.com/IntCyberDigest/status/2114823380889436255

‼️ EU governments approved a GDPR change to let companies train AI on Europeans' personal data without consent.

It makes AI training a possible "legitimate interest", judged case by case. Parliament must still agree.

Max Schrems calls it a "digital expropriation" of Europeans.

https://x.com/IntCyberDigest/status/2114838732197224927

❗️ Cargo thieves have stolen more than $100M in hardware bound for US data centers since June, NBC News reports.

They hijack freight-broker accounts, post fake loads and send carriers malware links to take over their accounts too.

In one of the biggest heists, an SUV struck the

https://x.com/IntCyberDigest/status/2114853831955910808

‼️ Serbia's Aleksandar Vučić conceded defeat to a student movement after 14 years in power.

Six days before the vote, Citizen Lab confirmed Pegasus spyware on the iPhone of the Belgrade University rector, who backed the students.

Researchers count 16+ targets in Serbia in 2026.

https://x.com/IntCyberDigest/status/2114868931445837839

❗️ The FBI is withholding an entire investigative file on Silent Ransom Group, the gang that sends fake IT staff into law firms.

Release could "interfere with enforcement proceedings," it told TechCrunch in a FOIA reply.

The FBI's alert asks victims for CCTV of the impostors.

https://x.com/IntCyberDigest/status/2114883024013910343

‼️ Flock CEO Garrett Langley privately told police chiefs the backlash to his licence plate cameras is "not real", leaked audio shows.

He blamed bots, citing a 50% drop in chatter after Ukraine struck a Russian data centre.

He'd also like "to never do media again."

https://x.com/IntCyberDigest/status/2114898123357131170

❗️ Ukrainian drones hit one of two key data centres for Russia's tax service on 23 October, Ukrainian channel Exilenova+ says.

Russian tech media say the Gorodets site holds tax databases and civil records.

Russia hasn't confirmed the hit, and no tax outages have been reported.

https://x.com/IntCyberDigest/status/2114913222893650157