‼️ BREAKING: The FCC voted to stop recognising electronics test labs in China from December 2028.

Labs there tested 82% of devices seeking FCC approval in 2025 and US labs under 4%, Chair Brendan Carr says.

The FCC already cut off two foreign labs for copy-pasting test results.

https://x.com/IntCyberDigest/status/2116006426434998415

‼️ Google and Meta are resisting broad ICE demands for user data as the agency scours platforms for immigration speech.

Both are bracing for Democratic-led probes after the midterms.

Last year, Google handed ICE a student journalist's bank and card numbers on a subpoena no judge ever signed.

https://x.com/IntCyberDigest/status/2116021526059470985

‼️ Britain's spy agency GCHQ can't account for thousands of its USB sticks, hard drives and memory cards.

Some may hold data gathered under UK surveillance law.

Watchdog Lord Leveson says GCHQ "still cannot tell me what has happened" to them, years after he first raised it.

https://x.com/IntCyberDigest/status/2116048705329443183

‼️ GM will pay $220M to settle with 36 US attorneys general who say it sold drivers' braking, speeding and location data to brokers that passed it to insurers.

GM's own app told 370,000+ of those drivers they weren't enrolled, the states say.

GM must now get express consent.

https://x.com/IntCyberDigest/status/2116066824466866301

‼️ An unreleased Claude model turned a Linux kernel bug into a remote root exploit, and Ubuntu and Red Hat still lack a patch.

Anthropic says the exploit runs commands as root on servers with a multipath TCP listener, no login needed.

Debian shipped its fix on 16 October.

https://x.com/IntCyberDigest/status/2116081923902611934

🚨 BREAKING: North Korea stole $6.3B from Binance, the largest crypto theft on record.

Its TraderTraitor unit drained hot wallets on 10 blockchains, mostly in about 20 minutes.

The $1.4B in bitcoin was split within minutes into 19 wallets that no one can freeze.

https://x.com/IntCyberDigest/status/2116097023334367638

‼️ A suspected lone attacker hit 61 GitHub repos, from Google's LangExtract to Trivy and Brave, with 83 rigged posts in 45 minutes.

Radware says the posts hid commands in HTML comments to make CI/CD pipelines leak secrets.

It saw the code run twice but can't say what was taken.

https://x.com/IntCyberDigest/status/2116112123407265832

‼️ BREAKING: Cursor's extension marketplace served a backdoored Claude Code extension to up to 5,000 users.

For about 11 hours, version 2.1.313 planted an attacker's SSH key and persistence. Cursor says Anthropic did not build it.

Cursor has not said how the rogue build got in.

https://x.com/IntCyberDigest/status/2116127222528377208

‼️ Steam could be hijacked with zero clicks from any other PC signed in to the same account.

Atredis Partners found two buffer overflows in the messages Steam syncs between those PCs.

It released working exploits and says each bug is patched or past its disclosure deadline.

https://x.com/IntCyberDigest/status/2116142322316357907

‼️ An email address with backticks in it let researchers run commands on GNU Savannah, home of the source code for Bash.

Hacktron got root via an unpatched 2023 kernel bug and logged in as Bash maintainer Chet Ramey.

It says it could have pushed to Bash's Git repo, but didn't.

https://x.com/IntCyberDigest/status/2116157421534257377