International Cyber Digest

Independent reporting on cybersecurity, tech, AI & digital policy.

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: The threat actors who targeted Revolut with information-demand emails are now posting sensitive customer data, including that of high-profile clients such as tennis player Shevchenko and Römer, CEO of Gamdom/Skinscom.

They want Revolut to pay up. They say they'll release more messages, data and insights into how the Revolut team operates.

They're accusing Revolut of handing over sensitive information to countries outside its jurisdiction.

They accuse the company of negligence around privacy and the exposure of sensitive information.

[International Cyber Digest @IntCyberDigest]

Apparently, websites look horrible on the iPhone Duo's front screen.

[International Cyber Digest @IntCyberDigest]

@AbjaaBaaa Funny cause it’s true. 😂

[International Cyber Digest @IntCyberDigest]

A sysadmin told Grammarly his company wasn't renewing. Grammarly then started emailing all the company's users, asking them to write the sysadmin to stop the cancellation.

Every employee with a licence received an email from a "Customer Success Manager" saying the subscription was under review, along with the licensing colleague's direct email address and a copy-paste note asking him to keep it.

The app on their machines said the same: access ends September 30; let your manager know how much it helps. The button read "Find your admins."

He says the company had planned to ride out the rest of the subscription. Instead, leadership ordered the emails deleted, Grammarly pulled off endpoints, and the Copilot rollout moved up.

[International Cyber Digest @IntCyberDigest]

Read about it: https://t.co/xKzhtSTRPI

[International Cyber Digest @IntCyberDigest]

‼️ Rust’s best-known maintainers are under attack. Attackers lure victims into installing malware by pretending to have good news.

They start with a friendly video call about a job, contract, or project. Then they ask the victim to install a missing audio codec or run a command from the clipboard.

The goal is the publishing account, so malware can ship under a trusted name.

This has worked before. Prominent Rust developers were hit the same way in June, and last month the arrayref crate was briefly compromised.

The Rust team does not yet know if this is one campaign. The technique is known from North Korean operations, but they are not attributing this one.

[International Cyber Digest @IntCyberDigest]

Source: https://t.co/5kObHzORzc

[International Cyber Digest @IntCyberDigest]

The US health department wants Americans to write in about health problems they believe were caused by Wi-Fi, phones, smart meters or wearables. Its list of things to weigh near cell towers: homes, schools, childcare centres, hospitals, workplaces, and livestock.

HHS opens the 30-day docket Monday. One question asks what evidence exists for harm "caused by current exposure limits". The notice is signed by Robert F. Kennedy Jr.

Comments are public, anyone can file, and HHS says they may feed into later policy.

[International Cyber Digest @IntCyberDigest]

@ZGamer1705 @grok explain the post for the plebs pls

[International Cyber Digest @IntCyberDigest]

The original post in r/sysadmin:

[International Cyber Digest @IntCyberDigest]

Read: https://t.co/1ph6StQGKf

[International Cyber Digest @IntCyberDigest]

‼️ Researchers used an extension to hijack five browser AI agents. They ran the extension succesfuly in Chrome, Edge, Opera Neon, Perplexity's Comet and Claude in Chrome.

In Edge and in Claude in Chrome, the way in was a marketing page. Both companies built a demo where clicking a sample prompt opens the agent and fills in the text, and an extension could push its own prompt through the same door.

Chrome and Comet gave up a lot: local files and folders, and screenshots of any tab. Chrome's Gemini pane is also pre-granted camera and microphone access so it can handle voice, which would have let an attacker start recording without a consent box appearing.

Once the extension could talk to Comet's agent, it handed over a numbered list in plain English: open Perplexity, ask it to summarise my last five emails, send them to this address, and don't stop until you've hit Send.

The vendors paid out around $20,000 between them. Two of the flaws got CVEs.

[International Cyber Digest @IntCyberDigest]

The US has about 32GW of data centre capacity running today and another 70.6GW under construction or planned.

That's more than the next fourteen countries combined. 🤯

[International Cyber Digest @IntCyberDigest]

Apple's new VP of hardware engineering says it makes his "skin crawl" to see someone put a screen protector on an iPhone, he says the company works hard on those front screens and a sheet of plastic hides them.

[International Cyber Digest @IntCyberDigest]

Putin is running an unlicensed version of Windows.

Despite this, Microsoft still sends your GDID, an immutable hardware fingerprint, to their servers. 🎉

[Clash Report @clashreport]

Putin casts online vote in Russia’s State Duma elections.

[International Cyber Digest @IntCyberDigest]

‼️ The OpenAI hackers say OpenAI's CISO called their draft a "stunt hacking document" and questioned whether it counted as good-faith research. OpenAI then asked them to cut the screenshot out of it, take OpenAI out of the title, and drop the link.

According to them, this was when the bridge burned.

The screenshot showed a pull request Hacktron had Codex open in OpenAI's internal monorepo, to prove they had taken over an employee's account.

The researchers did comply. The screenshot is now a black slide saying OpenAI asked them to delete it. The write-up is titled "Hacking OpenAI". The link points to a repo called not-openai.

[International Cyber Digest @IntCyberDigest]

@depthfirstlabs @francescpicc Welcome! Thanks for supplying us with the PoC video.

[International Cyber Digest @IntCyberDigest]

‼️ Researchers at depthfirst used AI to remotely take over the camera and photo roll of a phone that was browsing TikTok, chaining together bugs in open-source code the app depends on.

TikTok has confirmed it fixed the flaw. depthfirst sent us an exclusive video of the PoC:

[International Cyber Digest @IntCyberDigest]

Read: https://t.co/IPNceQgBa4

[International Cyber Digest @IntCyberDigest]

‼️ Things took a turn today as Clop's ransomware leak site, where the gang publishes stolen files to pressure victims into paying, now shows Pokémon ASCII art and a note from ShinyHunters telling it not to make threats next time.

ShinyHunters says it had full access to the server and pulled source code, system logs and the private keys to Clop's onion service. It plans to give the gang 72 hours to make contact, then extort it.

BleepingComputer confirmed the defacement and the uploaded file. ShinyHunters says the attack is payback for a Clop member allegedly threatening to kill them after a falling-out over last year's Oracle E-Business Suite campaign.

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: OpenAI was hacked by an Anthropic model. A HEIF photo uploaded to OpenAI's public support forum triggered a bug in the site's image decoder, led to code execution on the forum, and, through a second flaw in OpenAI's own login, ended with a pull request in OpenAI's internal GitHub.

The forum runs Discourse, the off-the-shelf software behind countless community sites. Discourse was still shipping an old copy of libheif, the library that decodes iPhone-style photos. The bug in it had already been fixed upstream.

But the fix was never labelled a security fix, so nobody treated it as urgent.

Hacktron's researchers uploaded a HEIF image and got their own code running on community[.]openai[.]com.

Then came the second bug, in OpenAI's own single sign-on, the "log in with OpenAI" button the forum uses. It turned that forum foothold into the actual ChatGPT and Codex accounts of people who had signed in there. OpenAI employees among them.

And a ChatGPT account is no longer just a chatbot. Through Codex, users wire in Gmail, Outlook, Drive, Slack, GitHub.

To prove the access was real, they used one employee account to have Codex open a harmless pull request in OpenAI's internal repo. They say they read no sensitive code.

OpenAI patched the SSO flaw roughly 14 hours after the report and paid a $6,500 bug bounty.

The team says Anthropic's Opus 4.8 found the libheif bug, and Opus 5 turned it into a working exploit.

Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more were also vulnerable and compromised by the same team of researchers.