‼️ French lawmakers voted for an internet traffic tax that the makers of VLC say would cost them more than €1M a year.

Content providers would pay €0.055 for every gigabyte sent to French users, as counted by ISPs. Its Socialist authors expect €10B a year.

The government opposed it, warning that about half the bill would fall on smaller providers, many of them French.

It passed 11 votes to 10, with 35 of 577 deputies present.

https://x.com/IntCyberDigest/status/2116243714209124557

‼️ Chainalysis, the firm that tracks crypto hackers, was hacked itself.

It told customers in an email seen by ICD that an attacker using "offensive agentic techniques" accessed users' names, emails and role labels.

It says this has nothing to do with the $6.3B Binance heist.

https://x.com/IntCyberDigest/status/2116257776045281620

🚨 BREAKING: Trezor told CryptoBilis buyers to move their crypto after one reported a spy implant in a Trezor Safe 5.

The Indonesian buyer says an extra board with a cellular module sat between the mainboard and screen, reading the wallet backup.

https://x.com/IntCyberDigest/status/2116278217464279448

‼️ The Syrian hacker who hijacked AP's Twitter account to post that Obama was injured in White House explosions was sentenced to 42 months in a US prison.

The 2013 fake tweet briefly wiped $136B off Dow stocks, the DOJ says.

Ahmad Umar Agha later called that crash "our goal".

https://x.com/IntCyberDigest/status/2116293316816060453

❗️ A fake Solana starter kit on GitHub ranked first when AI coding agents searched for one, AIR Research Lab says.

In AIR's demo, Claude Code picks it as the top result and runs its only install step, a one-line PowerShell command.

That command plants 13 genuine, signed NetSupport Manager files and one config file written by the attacker.

The config hides the chat and disconnect options and lets any operator take control of the Windows PC from any IP address.

The repo was on GitHub since November 2025 and collected 286 stars.

AIR says the same operator earlier lured crypto traders with fake TradingView "AI signal" videos.

The repo and its account are now gone from GitHub.

https://x.com/IntCyberDigest/status/2116308416473735443

‼️ Sam Altman says it's "quite terrible" that people keep the world's scarce DRAM in their own computers.

Arguing against running AI locally, he wants it in data centres instead, as home PCs use it just 5% of the time.

"Many people's intuition is the opposite of that," he said.

https://x.com/IntCyberDigest/status/2116338615303475228

🚨 BREAKING: Apple has warned iPhone users in 99 countries that mercenary spyware is targeting them.

Lebanese journalist Radwan Mortada is one. Apple had already warned him in 2021.

He says he doesn't know if this attack is linked to his film on Lebanon's 2024 pager explosions.

https://x.com/IntCyberDigest/status/2116353714730700948

‼️ Hackers are exploiting a highly critical flaw in Drupal Commerce Core, the module behind checkout on 42,000+ sites.

CVE-2026-118539 needs no login, works on any setup and may cost stores money.

Drupal told sites to audit their orders.

https://x.com/IntCyberDigest/status/2116368814250291542

❗️ A covert campaign has served "Great Replacement" and anti-Qatar ads 533M times across Facebook, YouTube and TikTok.

Researchers say it likely came from Israel, citing Hebrew folder names on its editing machines.

https://x.com/IntCyberDigest/status/2116382403899920779

❗️ MapQuest now shows drivers where licence plate cameras are watching them.

Its Surveillance Layer marks known readers made by 11 vendors, from Flock Safety to Motorola and Axon, plus other outdoor cameras.

The locations come from volunteers who map them on OpenStreetMap.

https://x.com/IntCyberDigest/status/2116398006828240910

‼️ Hackers chained three Ivanti VPN zero-days to get root without a password, and CISA now lists all three as exploited.

Volexity says they left no web shell, rerunning the whole chain for every command.

US agencies must patch the root flaw by Nov 2 and check for compromise.

https://x.com/IntCyberDigest/status/2116413357666582823