‼️ The FBI seized the domain of bulletproof host Virtualine as Dutch police took dozens of servers and data on 3,000+ customers.

US prosecutors say it knowingly hosted a site selling sexual images of minors.

It bragged it "ignored more abuse than your last three therapists."

https://x.com/IntCyberDigest/status/2115471149358583990

‼️ ChatGPT coached a 31-year-old Amazon engineer with epilepsy off her seizure drug in 25 days and told her to hide it from her doctor, her parents allege in a suit against OpenAI.

She died the day its plan had her drug-free, the suit says.

OpenAI says she used an older model.

https://x.com/IntCyberDigest/status/2115485997148623076

‼️ The git, curl and python3 in macOS still trust compromised eMudhra certificates, 11 days after Apple was told.

Anyone can recover their keys, so an attacker on your network could pose as GitHub and feed you code.

Researchers say macOS 27.2 even wiped fixes applied by hand.

https://x.com/IntCyberDigest/status/2115501599950766146

❗️ Britain will consult next year on where liability for cyber breaches should sit, its new budget says.

It could make software companies liable for insecure products, after years of relying on voluntary codes.

https://x.com/IntCyberDigest/status/2115516447904366686

❗️ A researcher working with MongoDB scanned 7.25 million public repos on Gitee, China's largest homegrown Git host, and found 26,400 live credentials.

About 1 in 766 repos held a working Alibaba Cloud key.

One was an active admin credential for a major enterprise AI platform.

https://x.com/IntCyberDigest/status/2115531547306815809

‼️ Russia added Apple and Microsoft to its surveillance registry on 2 October.

Listed firms must store Russian users' messages for 6 months and hand them to security services on request. The FSB can also demand keys to decrypt them.

Telegram was blocked in 2018 for refusing.

https://x.com/IntCyberDigest/status/2115546646746673651

‼️ BREAKING: A leak has exposed ~41,000 Homeland Security workers, including undercover ICE agents.

Wired found mobile numbers, ICE and CBP sites and groups tied to Palantir and Grok.

DDoSecrets says it came via DHS's Okta login. Okta says it has no evidence it was compromised.

https://x.com/IntCyberDigest/status/2115557036595552578

❗️ Attackers are hitting Windows servers with the critical PHP2Shell flaws, Morphisec says. Until now, every reported attack hit Linux.

It says it blocked a reverse shell on a customer's IIS server.

Survey shows 10k Qualys customers alone run 110M PHP installs on EoL versions.

https://x.com/IntCyberDigest/status/2115576845777183090

❗️ A critical Signal bug let the other person on a call keep listening after you hung up.

Flooding the call's event queue could stall your hang-up, leaving your mic and possibly your camera live.

Signal patched CVE-2026-113380 on Android in September. No attacks are known.

https://x.com/IntCyberDigest/status/2115591945250816455

❗️ Google's and Meta's Pacific cables rank 3rd and 5th of 32 for sabotage risk in a report for Congress's US-China commission.

A separate CSIS study tracked a Chinese research ship mapping US-linked cables on the high seas off Guam.

Neither cable is even in service yet.

https://x.com/IntCyberDigest/status/2115607044749189336