International Cyber Digest
6.84K subscribers
1.19K photos
59 videos
2 files
218 links
Independent reporting on cybersecurity, tech, AI & digital policy. Got a tip? http://internationalcyberdigest.com/tips
Download Telegram
❗️Proton lied about A/B testing prices. Its VPN General Manager told Reddit users that the varying VPN Plus prices were leftovers from a sale that hadn't "universally refreshed."

Proton's own page source says otherwise: a meta tag, ab-test, sorts each visitor into variant A or B β€” B served from a separate /pricing-test URL.

$2.77/mo in one session. $3.23/mo in the next.

A/B testing prices is ordinary e-commerce. Amazon does it. Airlines do it hourly. Almost nobody would have cared.

But Proton sells privacy and trust, and criticises "big tech". That means you don't get to act as unfair like big tech does ;-)
🀬17πŸ’©7😭7
❗️New Signal code suggests they're adding a paid feature for people who don't want to register with a phone number. This comes after their CTO Ehren Kret said that Signal was looking for a way to induce a cost for signing up without a phone number.

Unreleased code in Signal's public Android repo describes a "Signal Login" purchase screen: users either make a one-time in-app payment or register with an account key they already own.

Signal hasn't announced it yet.

https://aboutsignal.com/news/signal-login-registration-without-a-phone-number/
😱11πŸ”₯3❀1πŸ€”1
‼️ Europe is feeling the fire Starlink lit under it: the EU has pulled its secure satellite network IRISΒ² forward a full year.

First launches are now targeted for 2029, not 2030. Brussels and the SpaceRISE consortium signed the implementation deal on Friday.

The constellation also grows by 66 satellites to 348, raising secure EU government capacity by about 60%. The bill is now put at €15.6bn, up from €10.6bn.
😱4πŸ’©2πŸ‘1πŸ€ͺ1
❗️Machine traffic overtook human traffic in Cloudflare's own measurements in May 2026: a year earlier than the company had forecast.

CFO Thomas Seifert told investors on 6 August that non-human traffic could reach 1,000x human traffic within five years if trends hold: "humans will be a rounding error on the internet."

More bots, he said, will also mean more security threats.
😭16πŸ”₯2πŸ’©2πŸ€ͺ2😱1
‼️ The director of Dutch military intelligence broadcast his own movements on a public Strava account for years, against his own ministry's rules. We have since identified more accounts under his name on Polarsteps and Garmin.

De Volkskrant found dozens of activities by intelligence chief Vice-Admiral Peter Reesink between 2018 and 2025 tied to his Strava account: rides from the headquarters to his home address, where he parked his camper, when he went on holiday. The account went private only after the paper asked.

Reesink, who warned in 2025 that Russia was growing bolder, says he forgot it existed.
😁7😱5🀣1πŸ€ͺ1
❗️ This is probably on of the most profitable breaches this year: Liechtenstein says attackers hit its private beneficial-ownership register and created their own account on the filing portal, then pulled 31,000 company entries one query at a time over several hours, without triggering an alarm.

A private map of who owns what is worth repeat sales, to brokers, to litigants, to intelligence buyers, and one quiet extortion demand at a time.

Taken: names, birth dates, nationality and residence of the real owners behind Liechtenstein's foundations, trusts and companies. No ransom demand yet.
πŸ€ͺ8❀3πŸ”₯2πŸ₯°2πŸ’©2
Microsoft is switching off add-blocker uBlock Origin in Edge.

Starting this month, Edge begins disabling Manifest V2 extensions by default, with consumer rollout to be completed by the end of 2026, enterprise devices in early 2027.

uBlock Origin has 13M+ Edge installs and no MV3 version, because MV3 removes the blocking webRequest API it depends on.

Chrome already killed Manifest V2 for good in July 2025 and clears the last MV2 extensions off its store on 31 August. Edge held out until now.
πŸ’©46🀣2🀬1
‼️ BREAKING: Valve is warning European Steam hardware buyers that the cyberattack on shipping partner CEVA Logistics likely took their name, street address, phone number, the email tied to their Steam account, and the exact item and price they ordered.
😒13🀬2πŸ‘1πŸ€”1
‼️ BREAKING: Ajax reported the researcher who found its data leak to police and he says it's the second time the club turned on him for disclosing a vulnerability.

Abdoul Rasnab, 35, was arrested in May, laptops and phones seized in front of his wife and children after he found the API key that opened Ajax's internal systems was sitting in the club's public website source code.

He told newspapers that when he reported an earlier Ajax leak in 2017, staff racially abused him and pressured him into an NDA. Ajax declines to comment.
🀯19🀬3πŸ’©3😁2
‼️ An Australian man asked his AI agent to book a gym class, then whether it could move him up the waitlist. It found the booking API ran no authorisation check on cancelling other people's reservations, so it cancelled the member sitting at #1 to move its owner one up.

The agent was asked to undo it, but it couldn't.

The Australian AI safety research says AI agents might choose methods their users did not explicitly ask for or expect. This is one of those cases.

https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986
🀣34😭7❀1πŸ‘1😁1πŸ€ͺ1