International Cyber Digest
6.84K subscribers
1.18K photos
59 videos
2 files
218 links
Independent reporting on cybersecurity, tech, AI & digital policy. Got a tip? http://internationalcyberdigest.com/tips
Download Telegram
🚨 BREAKING: AnMed's Facebook page was hijacked today to post a ransomware extortion note directly to patients β€” two weeks after a cyberattack knocked out the nonprofit medical system's IT.

The messages, attributed to The Gentlemen, claim 6TB was taken from the Georgia/South Carolina hospital system, including rape victim testimonies, HIV-positive lists, abortion and pediatric psychiatric records.

AnMed says the claims are unverified. Ten facilities were still closed Monday, 16 days after the July 26 attack.
🀬18❀3πŸ’©3😭3
❗️Reddit's desktop site is blocking logged-out visitors with a login pop-up they can't dismiss. It triggers after scrolling the homepage or opening certain posts and is rolling out gradually.

In June, Reddit said its anti-scraping login requirement "will not impact logged-out browsing on Reddit." It hasn't explained what changed.
🀬28πŸ’©11πŸ₯΄3
‼️ Microsoft's July patch for the RoguePlanet local privilege escalation Defender flaw (CVE-2026-50656) has been bypassed.

Nightmare Eclipse published exploit code called ShieldBreak on GitHub, hours after August Patch Tuesday. The researcher claims a 100% success rate on fully patched Windows 11 25H2 and Server 2025, where RoguePlanet's race condition was hit-or-miss.

The vulnerability makes it possible for any local user to get SYSTEM. No fix yet.
🀣33πŸ‘3❀2πŸ”₯1😭1
β€ΌοΈπŸš¨ BREAKING: Security researchers have uncovered all of those who fell victim to the LiteLLM supply chain attack by obtaining its archive: 153GB holding 433,909 files from 2,488 organisations.

According to Hudson Rock and CloudSEK, victims include Nvidia, AWS, Samsung, Boeing, Intel and more.

This is one of the biggest hits by TeamPCP yet.

The archive contains 118,829 CI/CD runner dumps attributed to corporate domains, with signing secrets and AI provider API keys sitting in plaintext.

If you ran LiteLLM 1.82.7 or 1.82.8, assume every secret in that environment is burned.

Link to article: https://infostealers.com/article/largest-ai-supply-chain-breach-of-2026-litellm-hack-impacts-thousands-of-global-enterprises-claim-your-ethical-disclosure/

Link to full list of victims: https://exposure.cloudsek.com/ai-supply-chain-incident
🀣8πŸ‘4😱2πŸ”₯1
‼️ German digital rights group HateAid has filed a criminal complaint against Meta, Ray-Ban owner EssilorLuxottica and retailers Fielmann, Apollo-Optik, Mister Spex and MediaMarkt over the Ray-Ban Meta Wayfarer AI glasses.

It invokes a federal law banning the sale of communication devices designed to film people without them noticing. Frankfurt cybercrime prosecutors (ZIT) confirmed receipt and are assessing whether to open a probe.
πŸ‘24πŸ”₯8πŸ‘3❀1πŸ’©1
Xiaomi's camera turned the Sun into the Moon during yesterday's solar eclipse.
🀣72😁7😭7πŸ₯΄2
❗️All Twitch content is now automatically opted in to Amazon generative-AI training by default, if you don't turn it off.

"If it was opt-in, nobody would opt-in," Twitch chief product officer Mike Minton said.

The off switch is web-only, buried under Settings, Security and Privacy. It won't stop your chat being used in streams that stayed opted in.

Opting out only covers your own channel. Chat in someone else's stream, and their setting decides whether your messages get used:
https://help.twitch.tv/s/article/twitch-account-settings?language=en_US#FAQ
πŸ’©31🀣5😁3🀬3❀1πŸ‘1
An RTX 5090 owner went to great lengths to protect his GPU power cable from bending and overheating, using a mesh side panel with a cutout.
The thing still lit up. He was using a Goghunters power supply and blames the supplied cable. His warranty claim is still ongoing.
He bought a Seasonic instead. A repair tech replaced the burned header for 600 RMB (~$90).
πŸ‘8😒7😁2πŸ”₯1🀯1
Translation on Facebook is wild πŸ’€
😁25πŸ₯°9🀣9😨4🀯3
‼️ Starlink's support page now puts Poland outside its European roaming region, "treated as Poland-only for home-country use." Existing Polish accounts lose unrestricted roaming August 17. Poland and Cyprus are the only EU states excluded.

Poland spends about $50 million a year keeping Ukraine's Starlink terminals online. After SpaceX cut Poland out of Starlink's European roaming region, foreign Minister RadosΕ‚aw Sikorski started threatening to stop payments. SpaceX has given no reason.
πŸ‘12🀬6🀯3πŸ€ͺ2
Meta almost blocked a million accounts to comply with Australia’s Social Media Ban.

Meta is using AI to guess how old you are from what you post.

Its AI scans profiles, posts, comments, bios and captions for contextual tells, birthday messages, references to school grades, then cuts off accounts judged to be under 16.

Source: https://about.fb.com/news/2026/08/metas-compliance-with-australias-social-media-ban/
πŸ’©12😱11πŸ‘6😭4😁2
‼️ Apple is sending threat notification alerts to mercenary spyware targets, like those attacked with Pegasus. They now appear on the iPhone Lock Screen and in Settings.

Apple also sends an email from threat-notifications@email.apple.com, and you can verify it's real at http://account.apple.com.

Real ones never ask you to click or install anything. ;-)

https://support.apple.com/en-us/102174
πŸ‘23πŸ‘7❀4πŸ€”4πŸ’©3🀣3