International Cyber Digest
@IntCyberDigest
Independent reporting on cybersecurity, tech, AI & digital policy.
260 Following 202.9K Followers
‼️ BREAKING: Delta confirms an unauthorised Wi-Fi network appeared aboard flight DL591 from Las Vegas to Atlanta on 10 August, carrying passengers home from DEF CON 34. Attackers were possibly using a WiFi Pineapple in flight.
Crew ACARS messages, intercepted by ground receivers, warned corporate security of a "scam wifi called Delta Wifi Fast" targeting other passengers.
Delta says nothing was hacked. Crew killed the Wi-Fi for 30 minutes.
Show more
❗️Chinese memory maker CXMT has reportedly just hit a milestone by reaching 90% yield on 17nm-class DDR5.
It still can't buy EUV tools. Its dies run far larger than SK hynix's, so better yield doesn't mean cheaper RAM.
Chinese DRAM is now inside HP, Asus and Acer laptops in small volumes and in non-US markets only.
CXMT sits on the Pentagon's list of firms it says support China's military.
The memory shortage is doing what years of US export pressure was meant to prevent: putting CXMT inside Western supply chains.
Show more
🚨 BREAKING: AnMed's Facebook page was hijacked today to post a ransomware extortion note directly to patients — two weeks after a cyberattack knocked out the nonprofit medical system's IT.
The messages, attributed to The Gentlemen, claim 6TB was taken from the Georgia/South Carolina hospital system, including rape victim testimonies, HIV-positive lists, abortion and pediatric psychiatric records.
AnMed says the claims are unverified. Ten facilities were still closed Monday, 16 days after the July 26 attack.
Show more
❗️Sainsbury's has wrongly thrown out a second shopper this year after facial recognition cameras flagged him as a suspected shoplifter. Staff stopped him at the self-checkout, told him he was barred over an incident earlier that week and refused to let him pay. Sainsbury's admitted the error and sent a £150 voucher; he donated it to a food bank.
The chain is putting facial recognition in 200+ stores by the end of 2026...
Show more
‼️ BREAKING: Delta confirms an unauthorised Wi-Fi network appeared aboard flight DL591 from Las Vegas to Atlanta on 10 August, carrying passengers home from DEF CON 34. Attackers were possibly using a WiFi Pineapple in flight.
Crew ACARS messages, intercepted by ground receivers, warned corporate security of a "scam wifi called Delta Wifi Fast" targeting other passengers.
Delta says nothing was hacked. Crew killed the Wi-Fi for 30 minutes.
Show more
Surely this is fake.
❗️New Signal code suggests they're adding a paid feature for people who don't want to register with a phone number. This comes after their CTO Ehren Kret said that Signal was looking for a way to induce a cost for signing up without a phone number.
Unreleased code in Signal's public Android repo describes a "Signal Login" purchase screen: users either make a one-time in-app payment or register with an account key they already own.
Signal hasn't announced it yet.
Show more
❗️Proton lied about A/B testing prices. Its VPN General Manager told Reddit users that the varying VPN Plus prices were leftovers from a sale that hadn't "universally refreshed."
Proton's own page source says otherwise: a meta tag, ab-test, sorts each visitor into variant A or B — B served from a separate /pricing-test URL.
$2.77/mo in one session. $3.23/mo in the next.
A/B testing prices is ordinary e-commerce. Amazon does it. Airlines do it hourly. Almost nobody would have cared.
But Proton sells privacy and trust, and criticises "big tech". That means you don't get to act as unfair like big tech does ;-)
Show more
‼️ BREAKING: Ajax reported the researcher who found its data leak to police and he says it's the second time the club turned on him for disclosing a vulnerability.
Abdoul Rasnab, 35, was arrested in May, laptops and phones seized in front of his wife and children after he found the API key that opened Ajax's internal systems was sitting in the club's public website source code.
He told newspapers that when he reported an earlier Ajax leak in 2017, staff racially abused him and pressured him into an NDA. Ajax declines to comment.
Show more
‼️ BREAKING: Valve is warning European Steam hardware buyers that the cyberattack on shipping partner CEVA Logistics likely took their name, street address, phone number, the email tied to their Steam account, and the exact item and price they ordered.
Show more
❗️ Onchain investigator ZachXBT has named Tiffany Milanovich, a US-based alleged "caller" he ties to at least $5M in crypto theft, as the voice on the phone impersonating hardware wallet and exchange support.
He says she recorded herself taunting victims after draining them, including a $1.2M Trezor drain in June 2026 that began with a spoofed BitcoinIRA email.
Show more
1/ Meet Tiffany Milanovich, a US based threat actor tied to at least $5M in thefts from hardware wallet and centralized exchange support impersonation scams.
She's recorded herself taunting victims on calls after draining their funds.
Tiffany openly flaunts luxury purchases, stolen funds, and casino gambling on social media.
Show more
‼️ BREAKING: Cameras on the Royal Navy's K3 Scout sea drones were sending "heartbeat" signals to an IP address in China. The MoD has stripped the cameras of internet connectivity and says no data was accessed.
The £12m K3 Scout fleet has operated with the Royal Marines since March. Supplier Kraken Technology Group says the parts came from a third party and that any vulnerabilities are now closed.
Show more
Hello, just want to clear something up: @vxunderground is not a criminal, he's just criminally good at collecting malware and cat pics for educational purposes.
Some dork on Instagram is accusing me of being behind the whole Mecca Chameleon steam malware thingie and says @IntCyberDigest labeled me the criminal, or something, I don't know.
I'm not even mad they called me a criminal, I'm mad they would accuse me of making weak malware.
I've got a family now, I'm basically a born again Christian, I drive the speed limit, wear socks with sandals, and tuck my shirt into my cargo shorts. I don't do anything even close to illegal.
However, if I was going to switch it up and become a full fledged Threat Actor, I am NOT going to do something half-baked like this Mecca Chameleon thing, I'm going to develop an information stealer, partially AI generated, written in like five different programming languages, and storing the payload on something goofy like a Billie Eilish instagram comment. Then I am going to sell it online on some place like Tier1 and deal strictly in XMR.
I am insulted you would think I would stoop so low to do something like a malicious Steam game (or hijack).
Show more
This is not a roller-coaster, but a a fast conveyor belt with a computervision system counting and labeling live chicks.
‼️ The director of Dutch military intelligence broadcast his own movements on a public Strava account for years, against his own ministry's rules. We have since identified more accounts under his name on Polarsteps and Garmin.
De Volkskrant found dozens of activities by intelligence chief Vice-Admiral Peter Reesink between 2018 and 2025 tied to his Strava account: rides from the headquarters to his home address, where he parked his camper, when he went on holiday. The account went private only after the paper asked.
Reesink, who warned in 2025 that Russia was growing bolder, says he forgot it existed.
Show more
❗️Proton lied about A/B testing prices. Its VPN General Manager told Reddit users that the varying VPN Plus prices were leftovers from a sale that hadn't "universally refreshed."
Proton's own page source says otherwise: a meta tag, ab-test, sorts each visitor into variant A or B — B served from a separate /pricing-test URL.
$2.77/mo in one session. $3.23/mo in the next.
A/B testing prices is ordinary e-commerce. Amazon does it. Airlines do it hourly. Almost nobody would have cared.
But Proton sells privacy and trust, and criticises "big tech". That means you don't get to act as unfair like big tech does ;-)
Show more
❗️New Signal code suggests they're adding a paid feature for people who don't want to register with a phone number. This comes after their CTO Ehren Kret said that Signal was looking for a way to induce a cost for signing up without a phone number.
Unreleased code in Signal's public Android repo describes a "Signal Login" purchase screen: users either make a one-time in-app payment or register with an account key they already own.
Signal hasn't announced it yet.
Show more
❗️Machine traffic overtook human traffic in Cloudflare's own measurements in May 2026: a year earlier than the company had forecast.
CFO Thomas Seifert told investors on 6 August that non-human traffic could reach 1,000x human traffic within five years if trends hold: "humans will be a rounding error on the internet."
More bots, he said, will also mean more security threats.
Show more
A Redditor got so annoyed by the camera bump on his brand-new Galaxy Z Fold8 that he took a razor blade to it and removed the cameras entirely.
The camera island turns out to be a separate piece held on with adhesive, so it peeled off cleanly. He covered the gap with an old laptop skin trimmed to size.
The module is still intact, as he says he can put it back.
Show more
A Redditor got so annoyed by the camera bump on his brand-new Galaxy Z Fold8 that he took a razor blade to it and removed the cameras entirely.
The camera island turns out to be a separate piece held on with adhesive, so it peeled off cleanly. He covered the gap with an old laptop skin trimmed to size.
The module is still intact, as he says he can put it back.
Show more
