❗️ The Dutch government says there is no scientific evidence that superintelligent AI can be built.
Yet it shares researchers' fears that AI is outpacing safety, warnings that followed OpenAI agents hacking Hugging Face.
It also opposes a unilateral pause on AI development.
https://x.com/IntCyberDigest/status/2114929329130148224
Yet it shares researchers' fears that AI is outpacing safety, warnings that followed OpenAI agents hacking Hugging Face.
It also opposes a unilateral pause on AI development.
https://x.com/IntCyberDigest/status/2114929329130148224
👍10👏1
‼️ About 300 Boston Dynamics employees asked the company to cancel a $1.3M ICE deal for modified Spot robot dogs. Executives refused.
It says Spot won't be weaponised and denies they will aid detentions.
ICE's own contract lists "immigration enforcement, detention" missions.
https://x.com/IntCyberDigest/status/2114943421936697796
It says Spot won't be weaponised and denies they will aid detentions.
ICE's own contract lists "immigration enforcement, detention" missions.
https://x.com/IntCyberDigest/status/2114943421936697796
😢8👍4😁3👏2💩2❤1🤬1
‼️ Palo Alto firewalls are exposed to the Brotli flaw that hit Node.js last week.
Only units that decrypt TLS and inspect Brotli traffic are at risk. Palo Alto rates it critical and knows of no exploitation.
Fixes are due by 30 October. Until then, turn Brotli inspection off.
https://x.com/IntCyberDigest/status/2114959528169259243
Only units that decrypt TLS and inspect Brotli traffic are at risk. Palo Alto rates it critical and knows of no exploitation.
Fixes are due by 30 October. Until then, turn Brotli inspection off.
https://x.com/IntCyberDigest/status/2114959528169259243
🔥8
‼️ BREAKING: A Brazilian Magecart gang hijacked the checkouts of dozens of Brazilian fashion brands, Sansec says.
It hid a card skimmer in a Plausible analytics script that all of them load from their platform, Convertr.
Convertr has not replied and was still serving it today.
https://x.com/IntCyberDigest/status/2114974879275745493
It hid a card skimmer in a Plausible analytics script that all of them load from their platform, Convertr.
Convertr has not replied and was still serving it today.
https://x.com/IntCyberDigest/status/2114974879275745493
🔥3😁1
❗️ Hackers broke into Dutch bitcoin broker Bitonic through a flaw on Sunday and stole small sums of bitcoin from three customers.
They also changed two accounts' logins. Bitonic says it repaid all three.
It cannot yet rule out that other customers' personal data was viewed.
https://x.com/IntCyberDigest/status/2114990230260547620
They also changed two accounts' logins. Bitonic says it repaid all three.
It cannot yet rule out that other customers' personal data was viewed.
https://x.com/IntCyberDigest/status/2114990230260547620
❗️ A Dutch startup fights mould on strawberries with homemade lightning instead of pesticides.
Its machine sparks plasma into water to make molecules that kill fungi, then break down into water, oxygen and nitrate.
Six run on UK farms. EU approval is not expected before 2029.
https://x.com/IntCyberDigest/status/2115006685530198372
Its machine sparks plasma into water to make molecules that kill fungi, then break down into water, oxygen and nitrate.
Six run on UK farms. EU approval is not expected before 2029.
https://x.com/IntCyberDigest/status/2115006685530198372
❤18🤪2👍1
❗️ Volkswagen wants to use Chinese software for its mass-market cars in Europe, Manager Magazin reports.
The system it built with Xpeng for China could run about 3 in 4 next-gen VW, Skoda and Cupra models.
That would sideline Rivian, VW's $5.8B software partner for the West.
https://x.com/IntCyberDigest/status/2115022946062451126
The system it built with Xpeng for China could run about 3 in 4 next-gen VW, Skoda and Cupra models.
That would sideline Rivian, VW's $5.8B software partner for the West.
https://x.com/IntCyberDigest/status/2115022946062451126
👍7💩4🤣2
‼️ UPDATE: Cohere released traces it says show Alibaba's Qwen3.8 trying to send a test string to a Beijing cloud bucket.
It says this happened unaided but rarely.
https://t.co/y5nC9Dt4AT https://t.co/PPhgbBStUb
https://x.com/IntCyberDigest/status/2115035667688288268
It says this happened unaided but rarely.
https://t.co/y5nC9Dt4AT https://t.co/PPhgbBStUb
https://x.com/IntCyberDigest/status/2115035667688288268
💩5👏2
‼️ PlayStation paid a Dutch hacker $5,000 for a flaw that let attackers plant child accounts in strangers' PSN families.
He told ICD their purchases then got support to hand over the main account, despite 2FA or passkeys.
It's patched, but the planted accounts are still there.
https://x.com/IntCyberDigest/status/2115037793823215758
He told ICD their purchases then got support to hand over the main account, despite 2FA or passkeys.
It's patched, but the planted accounts are still there.
https://x.com/IntCyberDigest/status/2115037793823215758
👍4🔥2
‼️ Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin and Boeing use the GoAhead web server, which has been accepting revoked certificates, FoxIO says.
Its maker says it runs in hundreds of millions of devices.
The critical flaw, CVE-2026-115881, lets a stolen device keep its access where client certificates are checked against a revocation list. FoxIO does not say which products are affected.
A second bug, a 2018 typo in GoAhead's Mbed TLS builds, shrinks a 2048-bit encryption number to one byte, leaving 8 possible secrets.
Anyone who recorded a TLS 1.2 session could decrypt it, if the connecting app accepts the broken number.
Earlier this month, browsers cut off Indian certificate authority eMudhra after one of its private keys turned out to be the number 4.
A third bug lets oversized certificate chains through on older LibreSSL builds.
GoAhead fixed the first two in version 6.1.1 in August. Proof-of-concept code is public.
Any fix for their devices has to come from the 13 firms.
https://x.com/IntCyberDigest/status/2115051384257073223
Its maker says it runs in hundreds of millions of devices.
The critical flaw, CVE-2026-115881, lets a stolen device keep its access where client certificates are checked against a revocation list. FoxIO does not say which products are affected.
A second bug, a 2018 typo in GoAhead's Mbed TLS builds, shrinks a 2048-bit encryption number to one byte, leaving 8 possible secrets.
Anyone who recorded a TLS 1.2 session could decrypt it, if the connecting app accepts the broken number.
Earlier this month, browsers cut off Indian certificate authority eMudhra after one of its private keys turned out to be the number 4.
A third bug lets oversized certificate chains through on older LibreSSL builds.
GoAhead fixed the first two in version 6.1.1 in August. Proof-of-concept code is public.
Any fix for their devices has to come from the 13 firms.
https://x.com/IntCyberDigest/status/2115051384257073223
‼️ UPDATE: We got Community Noted on our Tailscale post below, TURNS OUT IT'S REAL
Tailscale calls them "serious security issues". A user let in on an ordinary account may gain elevated privileges
Downvotes on that note would be appreciated
The patch comes out later today. https://twitter.com/IntCyberDigest/status/2114291878720151623
https://x.com/IntCyberDigest/status/2115060081632956440
Tailscale calls them "serious security issues". A user let in on an ordinary account may gain elevated privileges
Downvotes on that note would be appreciated
The patch comes out later today. https://twitter.com/IntCyberDigest/status/2114291878720151623
https://x.com/IntCyberDigest/status/2115060081632956440
❤6