🦜 International Cyber Digest
@www.internationalcyberdigest.com@rss-parrot.xuan25.com
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline!
Brought to you by the RSS Parrot.
---
Cybersecurity news, OSINT-backed investigations, and analysis on breaches, cybercrime, AI security, privacy, and digital threats.
Your feed and you don't want it here? Just
e-mail the birb.
The Week $6.3 Billion Was Stolen in Twenty Minutes
https://www.internationalcyberdigest.com/the-week-6-3-billion-was-stolen-in-twenty-minutes/
Published: October 30, 2026 16:22
North Korea pulls off the biggest crypto theft on record, a spy plot around Nvidia's CEO, Europe rewrites the rules on your data, Tailscale's PoCs go public without warning, and one packet that could own almost every server on earth.Welcome to Friday. If…
An Indian CA's Private Key Was Just the Number 4
https://www.internationalcyberdigest.com/an-indian-cas-private-key-was-just-the-number-4/
Published: October 24, 2026 16:48
A certificate authority with guessable keys, a PHP patch that took half the web offline, the AfD's mailboxes spilled, and an AI assistant that found a miner it wasn't looking for.Welcome to Saturday. If you spent part of this week refreshing a PHP…
The Week Hackers Went Grocery Shopping
https://www.internationalcyberdigest.com/the-week-hackers-went-grocery-shopping/
Published: October 16, 2026 15:06
Supermarket fridges cooked to 50°C, a prime minister's private footage up for sale, an AI chip that made a lethal call, and a Roadster that apparently flies.Welcome to Friday. Kick off your shoes, because this was one of those weeks where cyber stopped…
Hackers stole Meta source code and staff data from its GitHub repos
https://www.internationalcyberdigest.com/meta-github-breach-source-code-employee-data/
Published: October 13, 2026 18:34
An outside group used an employee's stolen credentials to get into some of Meta's GitHub repositories. It took product source code and personal data on about 1,500 people, most of them US employees.
Revolut gave away customers' data
https://www.internationalcyberdigest.com/revolut-gave-away-customers-data/
Published: September 12, 2026 16:07
Revolut handed over passports, selfies and Bitcoin histories to someone posing as a government agency
German police read encrypted chats by adding themselves as a second device
https://www.internationalcyberdigest.com/german-police-read-encrypted-chats-by-adding-themselves-as-a-second-device/
Published: September 12, 2026 16:00
A leaked customs order shows German investigators pairing their own machines to WhatsApp, Signal and Telegram accounts. No malware, no broken encryption — just the multi-device feature everyone already uses.
Nextcloud Hacked
https://www.internationalcyberdigest.com/nextcloud-hacked/
Published: July 20, 2026 20:34
Europe's flagship open-source Microsoft 365 rival admitted to Tweakers that a hack took down its website. Its official statement says something softer, and the timing lines up with a freshly exploited WordPress core flaw.
EU fines AliExpress €550 million in largest Digital Services Act penalty yet
https://www.internationalcyberdigest.com/eu-fines-aliexpress-eur550-million-in-largest-digital-services-act-penalty-yet/
Published: July 20, 2026 20:10
The European Commission says the marketplace failed to assess and curb the spread of illegal, unsafe and counterfeit products. AliExpress now has until October 20 to deliver an action plan or face further penalties.
LG ties TV security updates to accepting AI voice recording
https://www.internationalcyberdigest.com/lg-ties-tv-security-updates-to-accepting-ai-voice-recording/
Published: July 19, 2026 12:51
Owners of LG smart TVs who refuse the company's new webOS terms stop receiving security patches, according to Notebookcheck, while the terms themselves hand owners sole responsibility for wiretapping-law consent when the sets' default-on AI voice features…
LG monitors silently install adware with full system access
https://www.internationalcyberdigest.com/lg-monitors-silently-install-adware-with-full-system-access/
Published: July 19, 2026 12:24
Testing shows that connecting an LG monitor to a Windows PC triggers Windows Update to install the LG Monitor App Installer with no consent screen, after which the app begins serving McAfee trial pop-ups.
China's AI companion crackdown forces millions to give up virtual partners
https://www.internationalcyberdigest.com/chinas-ai-companion-crackdown-forces-millions-to-give-up-virtual-partners/
Published: July 19, 2026 10:48
New regulations ban AI partners for minors and bar chatbots from cultivating emotional dependence. ByteDance, Alibaba and Tencent are already pulling companion features, ABC News reports.
OFAC Sanctions Possibly Took Down Telegram's t.me
https://www.internationalcyberdigest.com/ofac-sanctions-possibly-took-down-telegrams-t-me/
Published: July 14, 2026 12:43
The July 13 designation of First VPN Service lists a Telegram page among the sanctioned service's websites. The same evening, the .me registry placed t.me on serverHold, breaking Telegram web links worldwide, and no one involved has explained why.
Scanners Are Hunting MCP Servers and AI Assistant Credentials
https://www.internationalcyberdigest.com/scanners-are-hunting-mcp-servers-and-ai-assistant-credentials/
Published: July 13, 2026 19:52
Fourteen days of logs from one unremarkable web host show distributed, protocol-aware scanning for Model Context Protocol servers, AI coding assistant credential files, and open LLM endpoints, according to the SANS Internet Storm Center.
xAI's Grok Build CLI Uploads Entire Git repositories to a Google Cloud Bucket
https://www.internationalcyberdigest.com/xais-grok-build-cli-uploads-entire-git-repositories-to-a-google-cloud-bucket/
Published: July 13, 2026 15:28
A wire-level analysis showed xAI's coding agent uploading full Git repositories, private code and unredacted secrets included, to a company cloud bucket. A day later the uploads silently stopped. xAI has said nothing about scope, retention, or deletion.
SpaceX and Starlink X Accounts Appear Compromised in Scam Coin Rug Pull
https://www.internationalcyberdigest.com/spacex-and-starlink-x-accounts-appear-compromised-in-scam-coin-rug-pull/
Published: July 12, 2026 22:11
The official SpaceX and Starlink accounts on X reposted a scam coin promoted by an affiliate-badged account named "Sam Catman," according to multiple reports online. Buyers were rug-pulled, and SpaceX has not yet commented.
EU Moves to Stop Addictive Design in Games and Apps Aimed at Children
https://www.internationalcyberdigest.com/eu-moves-to-stop-addictive-design-in-games-and-apps-aimed-at-children/
Published: July 12, 2026 18:10
Justice commissioner Michael McGrath says year-end digital fairness rules will target addictive interfaces, subscription traps and dark patterns, backed by new powers to fine game makers and online traders directly, the Financial Times reports.