‼️ Security firm Calif says iOS 27.2 kills most of the bugs it used to jailbreak an iPhone 18 Pro through Memory Integrity Enforcement, Apple's anti-spyware hardware.

Apple credits Calif on 6 of the 163 fixes.

The jailbreak survived a reboot, and Calif says AI helped build it.

https://x.com/IntCyberDigest/status/2115712741310693598

❗️ Apple can now ask iPhone users in the UK and three other countries to scan their face to prove they're adults.

iOS 27.2 judges the selfie on the phone and in Apple's cloud before 18+ app downloads in Australia, Brazil and Singapore too.

Even a software update can trigger it.

https://x.com/IntCyberDigest/status/2115727840679543038

❗️ The US Treasury sanctioned two Russians it says converted millions in crypto for North Korea's IT worker scheme.

Ilya Boykov alone handled $3.5M of it since 2024.

A North Korean-run outfit in Russia was hit too. Treasury says its IT workers use "Super Intelligence" tools.

https://x.com/IntCyberDigest/status/2115742940375162916

‼️ BREAKING: US officials believe Nvidia CEO Jensen Huang is the target of a Chinese spy plot.

They believe Alice Huang, a Megaspeed executive seen at his side in Taiwan, is a Chinese intelligence asset.

President Trump has been briefed about the matter.

https://x.com/IntCyberDigest/status/2115761060292567275

‼️ Bluesky is blocking links to the "Icepick" leak of 41,000+ DHS personnel as "malicious".

It told WIRED the files hold emails and phone numbers "shared without their authorization".

On X, Grok pointed users to a "cleaned searchable web tool" and torrents of the full archive

https://x.com/IntCyberDigest/status/2115776663392813124

‼️ Google won't fix an Android bug that lets one invisible text crash a phone's calling service, researcher Mark Blaszczyk says.

So he just released the Proof-of-Concept!

The malformed message never reaches the inbox and needs no user interaction. It drops active calls, emergency calls included.

He says about 30 sent in a row corrupt the phone's SMS database, so a Pixel 9 or Samsung Galaxy crashes on every boot. A factory reset only helps until the carrier delivers the texts again.

He reported it to Google on 5 May. Google closed it as "Won't Fix" and a "Non-Security Issue".

https://x.com/IntCyberDigest/status/2115792768723476603

‼️ Jack Dorsey's Block used AI to find a way to crash Bitcoin nodes on Windows, macOS and BSD.

A malicious peer can send TCP urgent data that slips past Bitcoin Core's memory limit until the node runs out and crashes. Linux is not affected.

Bitcoin Core patched it in 29.5,

https://x.com/IntCyberDigest/status/2115807113822003478

‼️ Proton CEO Andy Yen called a staffer's plea to pentest new code before release "bullshit and loser thinking".

Yen wrote that workers should prompt “better.”

Proton's CTO told staff AI wrote 90% of its code in October, much of it with Anthropic's Claude.

https://x.com/IntCyberDigest/status/2115821962073137276

‼️ An unknown APT group likely poisoned the supply chain of a custom Windows 10 build for Asian governments, Kaspersky says.

Its NetamLoader malware hid in a Windows Update folder among real Patch My PC files and ran via Microsoft-signed .NET code.

https://x.com/IntCyberDigest/status/2115838067311559140

❗️ The US agency that runs federal buildings left 116 files, from courthouse floor plans to Social Security numbers, open to all its staff and contractors on Google Drive.

GSA's ~$7.8M scanning tool missed 34 of them stamped "For Official Use Only", the very phrase it looks for.

https://x.com/IntCyberDigest/status/2115838067315716348

‼️ Belgians can't file or even view their tax returns for a second day after a cyberattack on their tax authority.

FOD Financiën says it stopped the attack but is keeping its MyMinfin portal offline to rule out new risks.

https://x.com/IntCyberDigest/status/2115854826294988873