International Cyber Digest
7.29K subscribers
1.34K photos
69 videos
2 files
255 links
Independent reporting on cybersecurity, tech, AI & digital policy. Got a tip? http://internationalcyberdigest.com/tips
Download Telegram
❗️Thunderbolt is finally coming to Linux on Apple Silicon thanks to volunteers who reverse-engineered it, without help from Apple.

Asahi's Sven Peter posted the first USB4/Thunderbolt driver for M1, M2 and M3 to the kernel list yesterday, after years of reverse-engineering.

Source: https://lore.kernel.org/asahi/20260830-b4-apple-soc-tbt-v1-0-44bc9348683c@kernel.org/
πŸ”₯39❀8πŸ’©3πŸŽ‰2
Anthropic has been misleading people with the Max plans: it has been advertising the $200 plan as 20x and the $100 plan as 5x. You'd expect to get 4 times more usage with those figures, but it turns out it's only 1.7x.

You pay twice the price, for 1.7x the usage. And yet they've literally been marketing it as if you're saving 50% (see screenshot below).

The usage figures Anthropic gave in July 2025 were 140–280 Sonnet hours at 5x and 240–480 at 20x.

Turns out that multiplier only covers the daily 5-hour session window. So in the end, if you take weekly cap into account, you pay more per hour with the 20x than with the 5x.
πŸ’©37😭5πŸ’―4❀2πŸ₯°1πŸ‘1
A leaked photo said to show vivo's X500 Pro Max has a camera island almost as wide as the phone itself

If it is real, vivo has built a camera with a phone stuck to the back

The ring around the lenses is reported to rotate as a mechanical control dial
🀣35πŸ‘8😁3❀2
‼️ Cronos halted its blockchain after a price-manipulation attack let an attacker borrow $74 million from the Tectonic lending app

The network is back online and says the chain state was rolled back to before the exploit

PeckShield says only about $6 million in Ethereum left the chain; the rest is stuck on Cronos
🀣14😁4❀1πŸ€ͺ1
🚨 BREAKING: Qilin has briefly published 6.3GB of data the ransomware group says it stole from the ATF, after a 72-hour countdown expired.

Files include Cellebrite extractions, dumps from an iPhone 6 and a Samsung Galaxy J3, and case folders naming investigation targets, phone numbers and IP addresses.

ATF is still investigating the claims and has not confirmed a breach.
1❀14😱2🀣1
Security researcher Zachi says he found an exploit in an app and reported it.

After two months with no reply to his bug report,

he tried again β€” this time by emailing the vendor from its own email address, with the message: "I'M WRITING TO YOU RIGHT NOW FROM YOUR OWN EMAIL."
🀣38❀6😁4πŸ”₯1πŸ’©1
‼️BREAKING: Nearly 22,000 Microsoft Exchange servers still miss the fix for a critical vulnerability that gets attackers into mailboxes without a password, Shadowserver says

The proof-of-concept exploit code is publicly available and easy to abuse.

Read:
https://shadowserver.org/what-we-do/network-reporting/vulnerable-exchange-server-report/
😭9πŸ”₯6🀣4😁1πŸŽ‰1
‼️ Many X users got password-reset emails they never requested, fortunately X engineer Mridul Singhai says there is no evidence of a breach

He says attackers appear to be targeting accounts now X Money is widely available

You can use X's Password Reset Protect setting against these attacks
🀣20❀1
‼️ BREAKING: We now know what led to the major breach at Manchester Airports Group that exposed 8.7 million people's data. Turns out they made a serious error: they put API keys with access to everything in their frontend's JavaScript files.
🀣35πŸ‘5😁3πŸ₯΄2
🚨 BREAKING: Defense Secretary Pete Hegseth’s driver’s license has leaked. A new dark-web service is selling scans of his and 153M+ U.S. and Canadian driver’s licenses.

Timestamps on the scans match victims’ visits to Hertz rental counters and cannabis dispensaries. Evidence points to idscan[.]net, an ID-verification vendor used by Hertz, Target, FedEx and 1,000+ dispensaries.

The FBI opened an investigation on Tuesday. Nexus claims it has been exfiltrating for over a year and added ~400,000 licenses in 24 hours.

https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
🀣37😨6
πŸ‡³πŸ‡΄ Norway's privacy regulator wants smart glasses pulled from sale. As a first step, Norway's Digitalisation Minister Karianne Tung is weighing a ban on facial recognition of strangers in public rather than on the glasses themselves, and is setting up an expert group to propose rules this autumn for the cameras and AI now built into glasses, earbuds and caps.
1❀29πŸ”₯6πŸ‘1