International Cyber Digest
9.58K subscribers
2.66K photos
100 videos
2 files
818 links
Independent reporting on cybersecurity, tech, AI & digital policy. Got a tip? http://internationalcyberdigest.com/tips
Download Telegram
Belgium's government can't agree on who hacked its supermarket freezers. The interior minister pointed at Iran and asked Defence to consider a military cyber response.

Hours later, the foreign minister's office told Belgian outlet HLN the evidence is not enough to officially blame Iran. No decision has been made on summoning Iran's ambassador.

Earlier this month, hackers remotely switched freezers in dozens of Belgian stores to defrost, some set to 50°C.

https://x.com/IntCyberDigest/status/2120905717854917081
🤣14🤔1
‼️ Dutch researchers found six new ways to take over the Danfoss fridge controller hackers have been hijacking in European supermarkets. None needs a login, and finding them took them under an hour.

Security researchers says every firmware up to the latest, 5.3.2, is affected. There is no patch, and the "strict" mode France's cyber agency advised doesn't help.

The software runs as root with no stack canaries and no secure boot, so an implant could possibly survive a factory reset.

Their write-up is titled "Don't bother patching." Belgium's cyber centre says to get the controllers off the open internet now.

https://x.com/IntCyberDigest/status/2120920955828486438
😁14❤2
‼️ A Kremlin propagandist's leaked laptop shows him using Claude and Qwen to mass-produce 43k articles a month, aimed at manipulating AI chatbots into repeating his propaganda as fact.

John Mark Dougan, a US citizen who fled to Moscow, said, "Publish my laptop. I don't care."

https://x.com/IntCyberDigest/status/2120935907918598572
🤣16👏2💩1
‼️ BREAKING: Hijacked GitHub accounts are pushing a stealer into 61,000+ code repositories to grab the keys to companies' cloud and build systems.

Security firm Aikido counts 4,837 compromised accounts since 10 November. The "wfx" stealer ran in at least 1,806 repos.

It then reverts its change within about a minute and deletes the run logs, so the real number may be higher.

It also plants backdoors in AWS and Azure that keep working after stolen keys are rotated.

The tell is a pull request titled "docs: dependency audit notes". Aikido says any account that opened one is compromised.

https://x.com/IntCyberDigest/status/2120951007878238368
🔥4
‼️ Microsoft Defender quietly uploaded a developer's unreleased programs to Microsoft 217 times in three months.

Garrett Stimpson found it in Defender's own logs. Most were test builds of one Go program, and one was a Python script from the Recycle Bin. Over 30 days, Defender's sample tool sent 2.8 GB.

On 28 October, Stimpson set sample sharing to "never send." Two hours later the setting flipped back on, and 25 more uploads followed.

The developer says no prompt ever appeared and can't tell what switched it back. Microsoft documents automatic "safe sample" uploads as Defender's default.

https://x.com/IntCyberDigest/status/2120966107313967253
💩16🤣7🤯2👍1
‼️ BREAKING: Microsoft Outlook is down worldwide, cutting people off from their email on the web and in the apps.

Microsoft blames "elevated load across multiple regions" and is restarting servers. It is still checking whether the surge is real traffic or a routing change.

https://x.com/IntCyberDigest/status/2120979162500375011
🤣12🎉2🥰1
‼️ UPDATE: Microsoft's outage now reaches far beyond Outlook. Teams, SharePoint, Copilot and even its Defender XDR security platform are hit.

Consumers can't reach their OneDrive storage or Office on the web either, TechCrunch reports.

Microsoft first blamed elevated load. Now it says a large number of its servers became unexpectedly unavailable, dumping their load onto the rest. It hasn't said why.

It is restarting the servers with a fix in place, investigating why they show high processor use, and has paused all deployments.

https://x.com/IntCyberDigest/status/2120982515431473366
❤10😁2🥰1
‼️ BREAKING: Jensen Huang's affair count just hit three, hours after he quit as Nvidia CEO.

He once told the AP that hanging out with his family is "all I do."

But now Reuters is citing two people familiar with the matter, that he also had an intimate relationship with a second Nvidia employee. Reuters is not naming her.

The first two: a woman US intelligence suspects of being a Chinese spy, and Nvidia's own VP of health care, The New York Times reported.

https://x.com/IntCyberDigest/status/2120996306332320087
🤣19😁3❤1🥰1🤔1💩1🥴1
‼️ A hacker says an 8GB Nvidia crypto-mining card hides 80GB of memory. She unlocked it, and in her tests it outran Nvidia's A100 AI chip.

The CMP 170HX uses the same chip as the A100, with the extra memory locked off by fuses. Kate broke the lock by glitching its voltage with a homemade STM32 board that she says an AI model designed.

That switched on up to 126 compute units, more than the 108 on any A100. It hit 85.9 TFLOP/s in FP16 against 72.5 for a retail A100, with all 80GB usable.

Each card took 1 to 48 hours of glitching. One of her 10 only gave up 64GB.

https://x.com/IntCyberDigest/status/2121011154050859489
😨17🥰5🤯5👍1🤔1
‼️ Camera maker Blackmagic packed 108 microphones into one palm-sized ball that records full 3D sound over a single USB-C cable, straight into an iPhone.

At the launch demo, the iPhone showed a live heat map of where each voice in the room was coming from.

Apple licensed it the array design and the encoding filters. The mic grew out of their work on Blackmagic's camera for Vision Pro's immersive films.

Blackmagic calls it the world's first 7th-order ambisonic mic. It costs $1,695 and ships in December.

https://x.com/IntCyberDigest/status/2121026505895477498
🤯3🤔1💩1🤣1