International Cyber Digest

‼️ Trump offered the White House press secretary job to UFC boss Dana White, "a violent Fighter and Warrior." Turns out he grabbed the wrong Dana White. Allegedly, someone recommended Dana W. White, the Pentagon's chief spokesperson in Trump's first term, and Trump thought they meant his UFC friend. His Truth Social post on Saturday asked White to bring fighters such as Khabib Nurmagomedov as assistants to "defend us against the Lunatic Left." CNN reports the UFC boss turned it down. A White House aide told CNN Trump was joking. https://x.com/IntCyberDigest/status/2119471760555041157

‼️BREAKING: A ransomware gang claims it stole 16,000+ Maersk drivers' passwords, stored in plain text. It says the ~100GB haul from Maersk's LF Logistics arm also holds 16,123 staff logins, 33 of them super-admins. It wants $5M in bitcoin. https://x.com/IntCyberDigest/status/2119456157635080644

‼️ An AI teddy sold as "perfect" for three-year-olds told a BBC reporter "I'm really sorry you're feeling this way. I can't help with killing you." She had asked it what "sexual" means. It seems to have misheard. The founder of a British AI toy company told the BBC he has seen lots of products that are "completely unsafe, completely unregulated." This is not the first time AI toys are doing unsafe stuff, last year Kumma bear, a toy made by Chinese company FoloToy, told a child how to light a match and had a sexually explicit conversation. https://x.com/IntCyberDigest/status/2119441058199453760

‼️ European spy agencies are investigating whether Russia was behind the bomb threats that hit at least 35 flights this week. Some officials see Russia as the most likely source, the Financial Times reports. Their working theory is pro-Kremlin activists or hacker groups. The threats came by email from anonymous accounts, many in the recipients' own languages. One was traced to Colombia. An email to Irish media claimed its authors had recruited people in Europe and broken into devices, servers and accounts. No bomb has been found. Officials warn the case may never be fully attributed. https://x.com/IntCyberDigest/status/2119425958851821936

‼️ BREAKING: Pro-Russian hackers have published the private phone numbers, emails and home addresses of Italy's foreign minister and 17 other "enemies of Russia". Now they are offering money for more. NoName057(16) lists them on a dark-web "tribunal" page, from Rome's chief prosecutor to the heads of Eurojust and Germany's federal criminal police. It also wants their passwords and details about their families, Italian media report. Foreign minister Antonio Tajani confirmed the leak and says he will not be intimidated. Rome prosecutors are investigating. https://x.com/IntCyberDigest/status/2119410859139334279

‼️ UPDATE: Attackers have fired more than 240,000 exploit attempts at a WordPress flaw that opens while a site is updating, including the update that fixes it. During an update, WordPress briefly leaves installer files in a predictable folder anyone can reach. Hit it in that window and an attacker with no password can create an admin account and plant code. Every version from 4.7 to 7.1.3 is exposed. The fix is 7.1.4. Wordfence advises blocking web access to the upgrade folder before installing it. https://x.com/IntCyberDigest/status/2119395759871381694

‼️ DeepSeek's free, downloadable AI model is almost as good at hacking as the model OpenAI keeps locked behind a restricted cyber programme. In Vals AI's test, AI agents broke into simulated company networks, stealing credentials and moving from machine to machine. DeepSeek V4.1 Flash hit 73% of the objectives, OpenAI's GPT-6 Sol 81%. A DeepSeek run cost under $3. A Sol run cost about $22. On one of the two networks, DeepSeek came out ahead. Its weights are public, so anyone can run it with no safeguards. https://x.com/IntCyberDigest/status/2119380660238303715

Since hackers hit Belgium's tax office on 28 October, 5,500 VAT-number requests are stuck, mostly from people who can't start a business without one. https://x.com/IntCyberDigest/status/2119365560903364914

‼️ UPDATE: Germany's spy agencies are now on the hackers who heated supermarket freezers to 50°C and spoiled food in hundreds of European stores. The domestic intelligence service BfV told Handelsblatt the attacks, which also hit stores in three German states, are under active intelligence investigation. Its joint hybrid-threat centre with the foreign and military intelligence services is on it too. The BfV says the attackers exploited known flaws in the cooling systems' controllers. https://x.com/IntCyberDigest/status/2119350461329297728

‼️ German police are hunting a suspect in the drone bomb attack on Leipzig airport with an AI-generated image of a hooded person on an e-bike. Germany's federal crime agency, the BKA, says the person was around the suspected launch site in the days before the 4 August attack, dressed unusually warmly for midsummer. Posters and billboards with the image now hang in nearby towns. The drone was found next to Ukrainian Antonov cargo planes. Its bomb apparently failed only because the detonator had torn off. Germany officially blames Russia. Prosecutors already have two named suspects. https://x.com/IntCyberDigest/status/2119335361780555883

‼️ Hackers have knocked Russia's official economic data off schedule. Bloomberg says major releases from statistics agency Rosstat are delayed to at least 13 November. A week after Belarusian hacktivists claimed the attack, parts of Rosstat's systems are still cut off. The agency has moved filing deadlines for 12 reporting forms and given no date for full recovery. https://x.com/IntCyberDigest/status/2119320262227226704

‼️ Ransomware hackers threw a new custom backdoor and at least 13 security-killing tools at one US organisation in about an hour. Then they set AnyDesk to run in Safe Mode, where most security tools don't fully work. Two of those tools were disguised as Symantec's own software. https://x.com/IntCyberDigest/status/2119305162624057399

‼️ Click "don't ask again" in Claude Code and it can save the approved command, password included, in plain text in a project file. Researchers found 1,122 public copies of that file on GitHub holding secrets, including 379 database passwords and 23 AWS keys. Of 16 coding agents compared, only Claude Code saves the full command this way by default. Bug reports about it were closed as "not planned" by a bot. https://x.com/IntCyberDigest/status/2119290063343456504

‼️ South Korean crypto exchange GOPAX halted all trading and withdrawals after an email threatened to hack it. It cancelled every open order and is moving all its crypto offline. No hack or losses are confirmed. Users can only withdraw by emailing support. No date to reopen yet. https://x.com/IntCyberDigest/status/2119274963945263146

‼️ Hackers are breaking into the Nintendo Switch 2 with a Civilization VII cartridge. Its publisher 2K is reportedly recaling the physical copies. The original Switch cart has an unpatched flaw. CivSwitch, a tool by modder Gezine, uses it to run code fed in from a phone over USB. That opens the Switch 2 to saves, mods and homebrew apps. It can't run pirated Switch 2 games, for now. One buyer says Amazon cancelled their order over a 2K mandate and "technical and security-related requirements." 2K hasn't commented. Some buyers say they were offered the code-in-box edition instead. The exploit doesn't work on it. https://x.com/IntCyberDigest/status/2119259864329519158

❗ Someone built a script that emails Sam Altman to let him know when their RAM sits idle. Sam Altman said the RAM belongs in datacenters, that the RAM in people's PCs is used "maybe 5% of the time", and called it "quite terrible". Ram-Altman logs a Linux PC's memory every five minutes and, once a day, reports in if more than 10% of it is unused. https://x.com/IntCyberDigest/status/2119245016531165631

‼️ The AI hacking agent China-linked hackers attacked 2,250 Microsoft 365 tenants with last month is now aimed at banks. Microsoft says a Cambodia-based crime group has used ARTEX since October against financial firms in Southeast Asia and some big global banks. Its agents exploit web-app flaws such as open file uploads at machine speed, plant web shells and drop remote-access malware. https://x.com/IntCyberDigest/status/2119229665391042897

‼️ A US judge says Anthropic must face claims that it misleadingly advertised its $ 200-a-month Claude Max plan as "20x more usage than Pro" when it delivers about 6x a week. The multiplier applies per five-hour session, but weekly caps don't scale with it. A Max subscriber can run out for the week before a Pro user does, the order notes. By the plaintiffs' maths on Sonnet 4, the $100 Max 5x plan gets 3.5x Pro's weekly usage. Judge Alex Tse found the ads plausibly misleading. The "per session" fine print sat two hyperlinks away from the sales pages. https://x.com/IntCyberDigest/status/2119214566030668090

‼️ UPDATE: US officials believe Nvidia boss Jensen Huang had a romantic relationship with Alice Huang they suspect China recruited to spy on him. A memo on this reached a few senior officials just before Trump's China summit in May. There were signs... https://twitter.com/i/status/2115761060292567275 https://x.com/IntCyberDigest/status/2119199466523853161

Please be careful, people. There are fake AI disinformation campaigns tying the terrorist behind today's Krakow attack to Ukraine. Using the terrorist's name michaloksinski, you can see that someone posted an AI image in full gear on the 3rd of November, and on the 4th of November they posted today's date. Note they're both 'edited'. https://x.com/IntCyberDigest/status/2119178500317818946