‼️ An unknown APT group likely poisoned the supply chain of a custom Windows 10 build for Asian governments, Kaspersky says.
Its NetamLoader malware hid in a Windows Update folder among real Patch My PC files and ran via Microsoft-signed .NET code.
https://x.com/IntCyberDigest/status/2115838067311559140
Its NetamLoader malware hid in a Windows Update folder among real Patch My PC files and ran via Microsoft-signed .NET code.
https://x.com/IntCyberDigest/status/2115838067311559140
😁6😱2🤔1
❗️ The US agency that runs federal buildings left 116 files, from courthouse floor plans to Social Security numbers, open to all its staff and contractors on Google Drive.
GSA's ~$7.8M scanning tool missed 34 of them stamped "For Official Use Only", the very phrase it looks for.
https://x.com/IntCyberDigest/status/2115838067315716348
GSA's ~$7.8M scanning tool missed 34 of them stamped "For Official Use Only", the very phrase it looks for.
https://x.com/IntCyberDigest/status/2115838067315716348
🎉9🤣4❤1😁1
‼️ Belgians can't file or even view their tax returns for a second day after a cyberattack on their tax authority.
FOD Financiën says it stopped the attack but is keeping its MyMinfin portal offline to rule out new risks.
https://x.com/IntCyberDigest/status/2115854826294988873
FOD Financiën says it stopped the attack but is keeping its MyMinfin portal offline to rule out new risks.
https://x.com/IntCyberDigest/status/2115854826294988873
🤬8😁5👏1
❗️ NETGEAR emailed the researcher behind WPSplinter, a 16-year-old Broadcom flaw that can let anyone in Wi-Fi range hijack a router, asking for his exploit.
It wants Quentin Kaiser's proof of concept and reproduction steps to "independently validate the vulnerability".
His list
https://x.com/IntCyberDigest/status/2115869776899629516
It wants Quentin Kaiser's proof of concept and reproduction steps to "independently validate the vulnerability".
His list
https://x.com/IntCyberDigest/status/2115869776899629516
😁2🤣2
‼️ BREAKING: PolymarkeT users were drained through its own website.
A hijacked DebugBear monitoring script sold users' positions and sent ~$2.6M to one wallet.
Polymarket halted trading and says victims will be made whole. The wallet has since been emptied.
https://x.com/IntCyberDigest/status/2115883486821122090
A hijacked DebugBear monitoring script sold users' positions and sent ~$2.6M to one wallet.
Polymarket halted trading and says victims will be made whole. The wallet has since been emptied.
https://x.com/IntCyberDigest/status/2115883486821122090
🎉8🤣6🔥2🥰2❤1
❗️ Lenovo's ThinkPlus FU100 fingerprint stick was marketed as "hardware encrypted" with AES-256, but inside was an ordinary SD card with nothing encrypted.
The fingerprint only switched on the USB link, researcher Xusheng Li found.
Lenovo's stopgap fix covered the card in
https://x.com/IntCyberDigest/status/2115898968597012674
The fingerprint only switched on the USB link, researcher Xusheng Li found.
Lenovo's stopgap fix covered the card in
https://x.com/IntCyberDigest/status/2115898968597012674
😁15🤣12
‼️ DeepSeek and Moonshot AI trained their latest models heavily on OpenAI's GPT-6 Astra, The Information reports.
OpenAI tied the core of a July campaign to copy its hidden reasoning to people linked to Moonshot.
Moonshot says its Kimi K3.1 Pro beat Astra on a coding benchmark.
https://x.com/IntCyberDigest/status/2115914571039068512
OpenAI tied the core of a July campaign to copy its hidden reasoning to people linked to Moonshot.
Moonshot says its Kimi K3.1 Pro beat Astra on a coding benchmark.
https://x.com/IntCyberDigest/status/2115914571039068512
🤣17🔥4💩3🥰1
‼️ BREAKING: ~$2.5B in crypto left a Binance hot wallet in one transaction, sent to a brand-new address.
The wallet that triggered it was funded through Tornado Cash. Founder CZ says it looks like a hack.
Tether and Circle have frozen ~$1.8B. Binance has not confirmed a hack.
https://x.com/IntCyberDigest/status/2115923630781833501
The wallet that triggered it was funded through Tornado Cash. Founder CZ says it looks like a hack.
Tether and Circle have frozen ~$1.8B. Binance has not confirmed a hack.
https://x.com/IntCyberDigest/status/2115923630781833501
🤣17🤯5❤2😁2😱2
‼️ BREAKING: The Binance hack has grown to about $5.6B drained across Ethereum, Bitcoin and Tron, on-chain trackers say.
If confirmed, it would be the biggest crypto heist on record.
Tether and Circle have frozen about $1.8B in stablecoins, and Circle says it acted "in https://t.co/9fBEaaZrWj
https://x.com/IntCyberDigest/status/2115929003659825377
If confirmed, it would be the biggest crypto heist on record.
Tether and Circle have frozen about $1.8B in stablecoins, and Circle says it acted "in https://t.co/9fBEaaZrWj
https://x.com/IntCyberDigest/status/2115929003659825377
🔥13🥰2💩2❤1
‼️ UPDATE ON THE BINANCE HACK:
Whoever emptied a Binance hot wallet had 50 authorisations signed with that wallet's own private key, on-chain data shows.
Under Ethereum's EIP-7702, an authorisation is a signed permission that lets a wallet hand control of itself to code.
Each one works only for the wallet's next transaction number, its nonce. Binance's wallet was still sending transactions, so that number kept moving.
The sender didn't know which number would be live, so they packed all 50 into one transaction, Blockaid says. One matched.
That one installed a sweeper contract on the wallet. Blockaid found that only the Tornado Cash-funded sender can operate it.
Minutes later it emptied the wallet of $1.6B in USDT, 167,464 ETH and 60+ other tokens.
Only that key, or the system that holds it, can produce those signatures. How the sender got them is unknown.
Across Ethereum, Bitcoin and Tron, at least $5.57B left Binance-linked wallets.
Binance says user funds are "completely safe" but has not explained how.
https://x.com/IntCyberDigest/status/2115947714353480160
Whoever emptied a Binance hot wallet had 50 authorisations signed with that wallet's own private key, on-chain data shows.
Under Ethereum's EIP-7702, an authorisation is a signed permission that lets a wallet hand control of itself to code.
Each one works only for the wallet's next transaction number, its nonce. Binance's wallet was still sending transactions, so that number kept moving.
The sender didn't know which number would be live, so they packed all 50 into one transaction, Blockaid says. One matched.
That one installed a sweeper contract on the wallet. Blockaid found that only the Tornado Cash-funded sender can operate it.
Minutes later it emptied the wallet of $1.6B in USDT, 167,464 ETH and 60+ other tokens.
Only that key, or the system that holds it, can produce those signatures. How the sender got them is unknown.
Across Ethereum, Bitcoin and Tron, at least $5.57B left Binance-linked wallets.
Binance says user funds are "completely safe" but has not explained how.
https://x.com/IntCyberDigest/status/2115947714353480160
😱7❤2🔥2🥰1🤔1🤣1