‼️ Coinbase says a security incident at its analytics vendor Amplitude hit contact data for some of its customers.

It denies a breach of its own systems and says funds were not touched.

It has not said how many were affected. SlowMist's security chief claims over 70,000.

https://x.com/IntCyberDigest/status/2115443566524747940

‼️ Hackers rigged 42 real GitHub repos to run malware when a developer opens one in Claude Code, Gemini CLI or Cursor, or just in VS Code, JFrog says.

The ~13MB payload was too big for GitHub's own code search to index.

The repos belong to 11 owners, from students to a company.

https://x.com/IntCyberDigest/status/2115456553390379371

‼️ The FBI seized the domain of bulletproof host Virtualine as Dutch police took dozens of servers and data on 3,000+ customers.

US prosecutors say it knowingly hosted a site selling sexual images of minors.

It bragged it "ignored more abuse than your last three therapists."

https://x.com/IntCyberDigest/status/2115471149358583990

‼️ ChatGPT coached a 31-year-old Amazon engineer with epilepsy off her seizure drug in 25 days and told her to hide it from her doctor, her parents allege in a suit against OpenAI.

She died the day its plan had her drug-free, the suit says.

OpenAI says she used an older model.

https://x.com/IntCyberDigest/status/2115485997148623076

‼️ The git, curl and python3 in macOS still trust compromised eMudhra certificates, 11 days after Apple was told.

Anyone can recover their keys, so an attacker on your network could pose as GitHub and feed you code.

Researchers say macOS 27.2 even wiped fixes applied by hand.

https://x.com/IntCyberDigest/status/2115501599950766146

❗️ Britain will consult next year on where liability for cyber breaches should sit, its new budget says.

It could make software companies liable for insecure products, after years of relying on voluntary codes.

https://x.com/IntCyberDigest/status/2115516447904366686

❗️ A researcher working with MongoDB scanned 7.25 million public repos on Gitee, China's largest homegrown Git host, and found 26,400 live credentials.

About 1 in 766 repos held a working Alibaba Cloud key.

One was an active admin credential for a major enterprise AI platform.

https://x.com/IntCyberDigest/status/2115531547306815809

‼️ Russia added Apple and Microsoft to its surveillance registry on 2 October.

Listed firms must store Russian users' messages for 6 months and hand them to security services on request. The FSB can also demand keys to decrypt them.

Telegram was blocked in 2018 for refusing.

https://x.com/IntCyberDigest/status/2115546646746673651

‼️ BREAKING: A leak has exposed ~41,000 Homeland Security workers, including undercover ICE agents.

Wired found mobile numbers, ICE and CBP sites and groups tied to Palantir and Grok.

DDoSecrets says it came via DHS's Okta login. Okta says it has no evidence it was compromised.

https://x.com/IntCyberDigest/status/2115557036595552578

❗️ Attackers are hitting Windows servers with the critical PHP2Shell flaws, Morphisec says. Until now, every reported attack hit Linux.

It says it blocked a reverse shell on a customer's IIS server.

Survey shows 10k Qualys customers alone run 110M PHP installs on EoL versions.

https://x.com/IntCyberDigest/status/2115576845777183090

❗️ A critical Signal bug let the other person on a call keep listening after you hung up.

Flooding the call's event queue could stall your hang-up, leaving your mic and possibly your camera live.

Signal patched CVE-2026-113380 on Android in September. No attacks are known.

https://x.com/IntCyberDigest/status/2115591945250816455