International Cyber Digest
6.82K subscribers
1.15K photos
59 videos
2 files
211 links
Independent reporting on cybersecurity, tech, AI & digital policy. Got a tip? http://internationalcyberdigest.com/tips
Download Telegram
🚨πŸ‡ͺπŸ‡Έ Ten years of piracy ends as Spanish police take down one of the largest illegal manga distribution platforms.

The site pulled in over €4,000,000 from pop-up advertising.

Police also seized two USB drives hidden inside a wall thermometer, holding cold wallets worth over €400,000.
😭31🀬9🀣1
🚨 Bybit's security team has uncovered a malware campaign targeting macOS users searching for Claude Code. SEO poisoning redirects victims to fake installer pages built to steal crypto wallet credentials and grant remote device access.
πŸ₯°4❀3πŸ”₯1😁1
🚨 Apple has finally patched the notification storage vulnerability that retained deleted messages for 30+ days, leaving them accessible to law enforcement extraction.

Happy to have contributed to this together with you, my followers, by making this go viral. πŸ’ͺ
πŸ‘31❀6πŸ”₯2😁2πŸ€”2
🚨 Password manager Bitwarden CLI v2026.4.0 was compromised in the ongoing Checkmarx supply chain campaign.

Attackers abused a GitHub Action in Bitwarden's CI/CD pipeline to ship malicious code.


Source:
https://socket.dev/blog/bitwarden-cli-compromised
🀣7πŸ‘4❀2🀬2
πŸš¨πŸ‡«πŸ‡· End of the line for 21-year-old French threat actor 'HexDex.' He’s been arrested in VendΓ©e, placed in pre-trial detention, and indicted for organized intrusion, extraction, obstruction, and fraudulent modification of state data systems.

He was preparing to sell 160M+ records on 30M people, sourced from a service used by French police.
❀5πŸ€”4πŸ‘2😒2🀬1🀣1
πŸš¨πŸ‡©πŸ‡ͺ Russian intelligence fully compromised the Signal account of Germany's parliament speaker Julia KlΓΆckner by pretending to be Signal support.

She is the second-highest state official and shared a CDU executive Signal group with Chancellor Merz. His phone came back clean, hers did not.

The Signal hack goes way beyond KlΓΆckner. 300+ are confirmed German victims, including a top CDU MP and the ex-deputy chief of German foreign intelligence.

German counterintelligence says parliamentary group chats are likely being read live, right now.

The FBI and CISA peg global victims in the thousands.
🀣28😭6❀4😁3🀯1
This media is not supported in your browser
VIEW IN TELEGRAM
β—οΈπŸ‡«πŸ‡· Following the French government's ban on Windows and its replacement with Linux, French activists are now saying goodbye to Windows 10 and actively encouraging people to embrace freedom and use Linux instead of paying for an upgrade to Windows 11, citing privacy concerns.
😁25❀13πŸ€”6🀣3πŸ’©1
Media is too big
VIEW IN TELEGRAM
πŸš¨πŸ‡ΈπŸ‡Ύ In 2019, a Syrian militiaman was handed a laptop and asked to repair it. Out of curiosity he clicked on a video file. What he saw froze him in place.

It was a video of Amjad Yousef committing a premeditated massacre.

Yousef lied to victims at the edge of a pre-dug pit in the street. "Run from the sniper," he shouted, sending them sprinting straight into his line of fire.

He personally shot dozens of them, one by one. At least 41 in the main leaked clip alone.

When it was over, he helped cover the pit, poured fuel on the bodies, and set them on fire, joking with colleagues the entire time.

Investigators link him to a wider operation that day that killed an estimated 288 civilians, women and children among them. He later admitted on record: "I killed a lot." "I took revenge." "I'm proud of what I did."

The video existed only because the killers filmed themselves as a trophy. It sat on an intelligence laptop for years.

The leaker passed 27 clips to a Syrian opposition contact in Paris. That contact rushed them to Prof. Uğur Ümit Üngâr at the University of Amsterdam.

Üngâr and Annsar Shahhoud spent years verifying the footage. Geolocation, OSINT, survivor and perpetrator interviews. They even confronted Yousef undercover through a fake pro-regime Facebook persona named "Anna."

The leaker then had to run for his life. He drove from Damascus to Aleppo, paid a $1,500 bribe to a colonel in the regime's 4th Division, and crossed no-man's land into opposition territory.

The crossing was delayed a day because the same colonel's unit was moving an illegal drug shipment along the same route. He eventually reached Turkey, then Europe.

In February 2022, the full evidence was handed to prosecutors in the Netherlands, Germany, and France. In April 2022, the Guardian and New Lines Magazine published the footage.

The world finally saw it. Systematic, pre-planned mass murder of civilians. Direct involvement of Assad's elite military intelligence. The killing machine.

Yousef went into hiding after Assad fell in December 2024. He was tracked for days across the Al-Ghab Plain of Hama before being arrested.

Thirteen years late, the man in the fishing hat is finally in cuffs.
πŸ‘17πŸ’©4πŸ€ͺ4❀2πŸ‘1
>be Dutch Justice Ministry
>2014, quietly sign a contract with Palantir
>hand it to the military border police
>plug it into the Advance Passenger Information system
>silently screen millions of Schengen flyers
>names, DOBs, nationalities, passport numbers, all of it
>years pass, no one knows
>Parliament asks the minister: "you using Palantir?"
>minister: "No"
>journalists FOIA the ministry anyway
>documents drop
>leaked invoice surfaces: six figures. for THREE months.
>internal emails show the minister KNEW about the contract while drafting the denial
>journalists, now holding the proof, ask the border police: "you using Palantir?"
>spokesperson, straight face: "never"
>journalist slides the documents across the table
>"ok actually we ran it from 2009 to 2015"
>constitutional law prof: "political mortal sin"
>Article 68 violated, the duty to inform Parliament
>ministry still won't say when the contract really ended
>or if it ended
>or what happened to the data on millions of passengers
😭12πŸ’©6πŸ€ͺ2πŸ‘1😁1🀬1
Media is too big
VIEW IN TELEGRAM
We got a lamp that does chores before GTA6…
😭9πŸ’©5πŸ”₯1
πŸ‡―πŸ‡΅ Japanese users are worried that X is damaging Japan's reputation by auto-translating "low-class" Japanese posts and pushing them onto your timeline, because X's algorithm rewards ragebait.

According to them, the feature mostly amplifies mockery of tourists, contempt for foreign cultures, and complaints framed in ways that were never meant to leave the island. All of it now surfacing in English, Spanish, Portuguese, and beyond, translated and pushed to users worldwide.

For decades, Japan's image abroad as a polite, harmonious society was protected by most foreigners not being able to read Japanese. The ugly corners of Japanese social media stayed local. The polished tourism ads went global.

That's gone now.

According to former TV presenter and YouTuber Kanon Aoki, X's auto-translation feature is pushing the rawest, most hostile Japanese posts straight into foreign timelines.

Aoki's frustration is direct. A minority of what she calls "low-class" Japanese users are now the loudest Japanese voices abroad, simply because the algorithm translates whatever gets engagement. The quiet majority stays invisible. The trolls go viral worldwide.

The result: foreigners' perception of Japan is shifting in real time, and there is no stopping it.
1🀣33❀4πŸ’©4πŸ”₯2πŸ€”1πŸ’―1
Proton CEO Andy Yen warns that the global push for age verification is the quiet death of online anonymity, because every passport scan, selfie, and biometric uploaded for "verification" inevitably ends up leaked, hacked, or monetized.

He argues Big Tech and governments cannot be trusted to act as gatekeepers, and the only real protection for ID data is to never collect it in the first place.

Source: https://proton.me/blog/keep-age-verification-from-killing-anonymity-online
πŸ‘35❀15πŸ‘4πŸ”₯3πŸ’©2πŸ™1
🚨πŸ‡ͺπŸ‡Ί The European Commission is about to steal your search history in one of the largest forced data grabs in the history of the open internet, and almost nobody is talking about it.

The scope is staggering:
πŸ”΄ Every query you type
πŸ”΄ Every voice and photo search
πŸ”΄ Every autocomplete you accept
πŸ”΄ Your language, your device
πŸ”΄ Your country pinned to a ~3kmΒ² grid
πŸ”΄ Every result you saw, every link you hovered
πŸ”΄ Every click and scroll
πŸ”΄ The full chronological order of your search sessions

Meaning the European Union now knows your:
πŸ”΄ Health symptoms
πŸ”΄ Pregnancy
πŸ”΄ Sexual orientation
πŸ”΄ Political views
πŸ”΄ Religious beliefs
πŸ”΄ Financial distress
πŸ”΄ Legal trouble
πŸ”΄ Addictions
πŸ”΄ Affairs

Under the proposed measures for DMA Article 6(11), Google would be ordered to ship the daily search behaviour of hundreds of millions of Europeans to multiple third parties through a daily API feed. Any approved "online search engine," AI chatbots included, would get five years of access.

The things people only ever type when they think no one is watching. All of it now scheduled to flow daily into an open-ended list of third parties scattered across the European Union.

Brussels promises "anonymisation." The reality is a thin technical veneer that has been broken in academic literature again and again for over a decade. Search behaviour is a fingerprint. Stripping a name does not change that.

Mass data leaks become inevitable. Every new beneficiary is a new attack surface, and every annual audit is a year of silent exposure between checks. The 2025 Discord vendor breach already showed how fast 70,000 government IDs can leak through a single weak link. Now imagine that link holding Europe's search history.

Surveillance without consent becomes the default. Hundreds of millions of EU citizens never agreed to have their queries packaged and shipped to companies they have never heard of. The legal fiction of "anonymisation" cannot manufacture consent that was never given.

Behavioural search data is a goldmine for phishing, blackmail, social engineering, and corporate espionage.

Foreign intelligence services get a back door without effort. They do not need to breach Google. They only need to compromise the weakest name on the beneficiary list. One insolvent startup. One compromised contractor. One approved entity quietly acquired by a hostile state.

In the name of "competition," the EU is about to manufacture a permanent, distributed, daily-refreshed copy of Europe's collective search history. A surveillance dataset Brussels itself would never approve if any other government tried to build it.

The public consultation closes Friday, May 1, 2026 at 23:59 CEST. The final binding decision lands July 27, 2026.

After that, the door does not close again.

Tag your MEPs! File a response! Make noise!
😱33❀8🀬3πŸ”₯2πŸ€”2😍1🀣1