‼️ Anthropic and Google researchers found a flaw that lets one crafted packet hijack a server during network boot, before Secure Boot checks the OS.

Almost all servers on earth are affected.

CVE-2026-97631 sits in TianoCore EDK II, code in the UEFI firmware of most servers.

https://x.com/IntCyberDigest/status/2115320154535985291

❗️ The UK Home Office may face a watchdog probe over its OpenAI-powered asylum tools, Wired reports.

Its own figures, obtained by Open Rights Group, show 45 of 203 AI interview summaries failed expert checks.

Applicants aren't told AI was used and can't correct what it wrote.

https://x.com/IntCyberDigest/status/2115335253900562636

‼️ Hackers broke into the parliamentary mailboxes of Italian PM Giorgia Meloni and two coalition MPs, la Repubblica reports.

Her office says it was her MP inbox, not her government email.

Chamber sources call it no emergency and say attacks like this happen every day.

https://x.com/IntCyberDigest/status/2115365453128183864

‼️ Hackers breached IT suppliers holding British police data in multiple attacks from 2021 to 2025, the UK police watchdog says.

The report does not say whether any data was stolen.

https://x.com/IntCyberDigest/status/2115380552551538723

‼️ Researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers and chained them to run code on iOS.

He says he got past Telegram's server-side checks, and the flawed code still ships in its apps.

Telegram said in March its servers validate every sticker.

https://x.com/IntCyberDigest/status/2115395103112196463

❗️ Chinese-speaking hackers used open-source CyberStrikeAI to aim 44 AI agents at 19+ organisations, 16+ in Japan.

The agents handled recon to data theft and wrote Japanese fake login pages.

The clearest break-in began at an old admin page with no login.

https://x.com/IntCyberDigest/status/2115410751385211333

‼️ Coinbase says a security incident at its analytics vendor Amplitude hit contact data for some of its customers.

It denies a breach of its own systems and says funds were not touched.

It has not said how many were affected. SlowMist's security chief claims over 70,000.

https://x.com/IntCyberDigest/status/2115443566524747940

‼️ Hackers rigged 42 real GitHub repos to run malware when a developer opens one in Claude Code, Gemini CLI or Cursor, or just in VS Code, JFrog says.

The ~13MB payload was too big for GitHub's own code search to index.

The repos belong to 11 owners, from students to a company.

https://x.com/IntCyberDigest/status/2115456553390379371

‼️ The FBI seized the domain of bulletproof host Virtualine as Dutch police took dozens of servers and data on 3,000+ customers.

US prosecutors say it knowingly hosted a site selling sexual images of minors.

It bragged it "ignored more abuse than your last three therapists."

https://x.com/IntCyberDigest/status/2115471149358583990

‼️ ChatGPT coached a 31-year-old Amazon engineer with epilepsy off her seizure drug in 25 days and told her to hide it from her doctor, her parents allege in a suit against OpenAI.

She died the day its plan had her drug-free, the suit says.

OpenAI says she used an older model.

https://x.com/IntCyberDigest/status/2115485997148623076