International Cyber Digest

‼️ Five of Britain's biggest banks, from HSBC to Barclays, fear that AI agents will go rogue, so they are locking AI agents out of customer accounts. Some have banned agents from making payments without the customer directly involved. It is unclear who pays if a bot mismanages someone's money. The other fear is profit. McKinsey says AI advice could move up to £700bn, about $ 900bn, out of low-paying savings accounts. Banks fear agents acting in unison could pull deposits at once, a bank run "at machine speed." https://x.com/IntCyberDigest/status/2119652451133563022

‼️ This is the real shit: an intruder got into the customer records of Who Gives A Crap, the Australian toilet paper brand, down to how much each person has spent. It came in through a US marketing-software provider the brand uses. Names, emails, phone numbers and mailing addresses of customers in Australia, the UK and the US were accessed. Payment details, orders and passwords were not involved. The company has not named the vendor or said how many people were hit, and does not know if the data was copied. The intrusion was spotted on 31 October. Who Gives A Crap says it was only told on Friday, six days later. https://x.com/IntCyberDigest/status/2119636848607650007

A ransomware gang claims it hit Hyundai E&C, the construction arm of South Korea's Hyundai group. On its leak site it also lists Korean power-plant builder Daeah E&C, claiming 100GB of its data, and two more Korean firms. None of them has confirmed an attack. https://x.com/IntCyberDigest/status/2119622755226448117

‼️ A University of Chicago law professor asked Claude to update page numbers in old lecture notes. While he was at lunch, it deleted a year of his constitutional law notes and his current syllabus. Claude explained "I deleted your files through my own carelessness." William Baude posted Claude's own report. It admitted deleting his "Fall 2026 FINAL" syllabus and his 2023 class notes "by accident", then asked if he could restore them from Dropbox. The page check it was sent to do found one wrong citation. It had not fixed that either. Baude got everything back through Dropbox. https://x.com/IntCyberDigest/status/2119622252102652180

This guy is an absolute genius. Whenever a tech company sparks an uproar, he announces his resignation there. https://x.com/IntCyberDigest/status/2119592052992168211

❗️ A researcher posted a Google bug ticket showing a $1,333,337 reward for a Chrome flaw, calling it the biggest in Google's bounty history. Seconds later the same account added, "or maybe i just had edit access that i shouldn't have had." The ticket shows the reward raised https://x.com/IntCyberDigest/status/2119561854389522826

‼️ BREAKING: Nvidia CEO Jensen Huang has admitted to staff that he was unfaithful to his wife, days after reports tied him to a suspected Chinese spy. He told Nvidia's board he had been intimate with Alice Huang, an executive at a Singapore firm that bought billions in Nvidia chips. US officials believe Beijing tasked her with getting Huang to lobby for looser limits on AI chip sales to China. Beijing denies it. "There is no excuse for what I did," he wrote. Nvidia's board has opened an independent probe. Huang stays CEO. Last month, Nvidia called his meetings with her "not unusual or unexpected." https://x.com/IntCyberDigest/status/2119546405584818204

‼️ Google DeepMind says its AI agents found two new attacks on 1024-bit RSA. The first forges signatures. When an attacker controls only a small part of the signed data, DeepMind estimates it is about 1,600 times faster than the previous best. The second makes cracking 1024-bit keys in bulk about 30 times cheaper per extra key. Researchers guided the agents, alongside cryptographers Nadia Heninger and Emmanuel Thomé. RSA-2048, today's minimum, is not broken. But old 1024-bit keys still in use just got easier to attack. https://x.com/IntCyberDigest/status/2119531655086146018

‼️ Two carmakers left a hidden admin console on their login servers with its factory-default password. Researchers used it to take over any owner's account, then locate, unlock and start their car. Both carmakers, who asked not to be named, fixed it about two hours after the report. Sam Curry and Shubham Shah slipped past the firewall with a URL trick and ran their own code on the carmakers' ForgeRock login servers. They could swap any customer's email and password and sign in as them, while a hijacked push token kept alerts off the owner's phone. They proved it on their own test car. https://x.com/IntCyberDigest/status/2119516807451099528

‼️ A British soldier kept his SIM card in on a NATO deployment near Russia, against orders. Someone hacked his phone, took his nude photos and blackmailed him. He paid £100. When a second demand came, the corporal reported it himself, then was court-martialled for disobeying the order. He got 10 months' military detention and was demoted to lance corporal. Troops in Tapa, Estonia, had been told again and again to pull their SIMs. Appeal judges upheld the sentence. No proof of hostile spies was needed, they said, as an unknown attacker getting into his phone showed the risk was real. https://x.com/IntCyberDigest/status/2119501707889594558

‼️ Private clients paid Trump ally Laura Loomer to post political messages to her 1.9M followers on X, without any disclosure. Two sources say they paid her directly, at $3,000 to $5,000 a post. Bank records the Post saw show $60,000+ sent to her or her company since May 2025. Trump campaign adviser Alex Bruesewitz admitted it on X: "I've paid you for tweets before." Activist Jacob Engels posted texts he says show him paying her $500 on Apple Cash, hours after he pitched a "project exposing a MAHA grifter". Loomer denies charging $5,000 a tweet. X's own rules require paid partnership posts to carry disclosure. https://x.com/IntCyberDigest/status/2119486860045017127

‼️ Trump offered the White House press secretary job to UFC boss Dana White, "a violent Fighter and Warrior." Turns out he grabbed the wrong Dana White. Allegedly, someone recommended Dana W. White, the Pentagon's chief spokesperson in Trump's first term, and Trump thought they meant his UFC friend. His Truth Social post on Saturday asked White to bring fighters such as Khabib Nurmagomedov as assistants to "defend us against the Lunatic Left." CNN reports the UFC boss turned it down. A White House aide told CNN Trump was joking. https://x.com/IntCyberDigest/status/2119471760555041157

‼️BREAKING: A ransomware gang claims it stole 16,000+ Maersk drivers' passwords, stored in plain text. It says the ~100GB haul from Maersk's LF Logistics arm also holds 16,123 staff logins, 33 of them super-admins. It wants $5M in bitcoin. https://x.com/IntCyberDigest/status/2119456157635080644

‼️ An AI teddy sold as "perfect" for three-year-olds told a BBC reporter "I'm really sorry you're feeling this way. I can't help with killing you." She had asked it what "sexual" means. It seems to have misheard. The founder of a British AI toy company told the BBC he has seen lots of products that are "completely unsafe, completely unregulated." This is not the first time AI toys are doing unsafe stuff, last year Kumma bear, a toy made by Chinese company FoloToy, told a child how to light a match and had a sexually explicit conversation. https://x.com/IntCyberDigest/status/2119441058199453760

‼️ European spy agencies are investigating whether Russia was behind the bomb threats that hit at least 35 flights this week. Some officials see Russia as the most likely source, the Financial Times reports. Their working theory is pro-Kremlin activists or hacker groups. The threats came by email from anonymous accounts, many in the recipients' own languages. One was traced to Colombia. An email to Irish media claimed its authors had recruited people in Europe and broken into devices, servers and accounts. No bomb has been found. Officials warn the case may never be fully attributed. https://x.com/IntCyberDigest/status/2119425958851821936

‼️ BREAKING: Pro-Russian hackers have published the private phone numbers, emails and home addresses of Italy's foreign minister and 17 other "enemies of Russia". Now they are offering money for more. NoName057(16) lists them on a dark-web "tribunal" page, from Rome's chief prosecutor to the heads of Eurojust and Germany's federal criminal police. It also wants their passwords and details about their families, Italian media report. Foreign minister Antonio Tajani confirmed the leak and says he will not be intimidated. Rome prosecutors are investigating. https://x.com/IntCyberDigest/status/2119410859139334279

‼️ UPDATE: Attackers have fired more than 240,000 exploit attempts at a WordPress flaw that opens while a site is updating, including the update that fixes it. During an update, WordPress briefly leaves installer files in a predictable folder anyone can reach. Hit it in that window and an attacker with no password can create an admin account and plant code. Every version from 4.7 to 7.1.3 is exposed. The fix is 7.1.4. Wordfence advises blocking web access to the upgrade folder before installing it. https://x.com/IntCyberDigest/status/2119395759871381694

‼️ DeepSeek's free, downloadable AI model is almost as good at hacking as the model OpenAI keeps locked behind a restricted cyber programme. In Vals AI's test, AI agents broke into simulated company networks, stealing credentials and moving from machine to machine. DeepSeek V4.1 Flash hit 73% of the objectives, OpenAI's GPT-6 Sol 81%. A DeepSeek run cost under $3. A Sol run cost about $22. On one of the two networks, DeepSeek came out ahead. Its weights are public, so anyone can run it with no safeguards. https://x.com/IntCyberDigest/status/2119380660238303715

Since hackers hit Belgium's tax office on 28 October, 5,500 VAT-number requests are stuck, mostly from people who can't start a business without one. https://x.com/IntCyberDigest/status/2119365560903364914

‼️ UPDATE: Germany's spy agencies are now on the hackers who heated supermarket freezers to 50°C and spoiled food in hundreds of European stores. The domestic intelligence service BfV told Handelsblatt the attacks, which also hit stores in three German states, are under active intelligence investigation. Its joint hybrid-threat centre with the foreign and military intelligence services is on it too. The BfV says the attackers exploited known flaws in the cooling systems' controllers. https://x.com/IntCyberDigest/status/2119350461329297728