International Cyber Digest

This account is verified. Learn more

@IntCyberDigest

Independent reporting on cybersecurity, tech, AI & digital policy.

internationalcyberdigest.com Joined September 2024

267 Following 276K Followers 11K Posts

Latest posts 5

Pinned post

International Cyber Digest @IntCyberDigest 3d

The bug is like a joke.

On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀

0:14

International Cyber Digest Verified account @IntCyberDigest 3d

‼️ BREAKING: OpenSSH has rushed out a fix for a critical flaw that lets attackers log into some Linux servers without the right password.

The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.

It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".

Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.

View quoted post on X

International Cyber Digest @IntCyberDigest 20m

‼️ Hackers are breaking into the Nintendo Switch 2 with a Civilization VII cartridge. Its publisher 2K is reportedly recaling the physical copies.

The original Switch cart has an unpatched flaw. CivSwitch, a tool by modder Gezine, uses it to run code fed in from a phone over USB.

That opens the Switch 2 to saves, mods and homebrew apps. It can't run pirated Switch 2 games, for now.

One buyer says Amazon cancelled their order over a 2K mandate and "technical and security-related requirements." 2K hasn't commented.

Some buyers say they were offered the code-in-box edition instead. The exploit doesn't work on it.

International Cyber Digest @IntCyberDigest 1h

❗ Someone built a script that emails Sam Altman to let him know when their RAM sits idle.

Sam Altman said the RAM belongs in datacenters, that the RAM in people's PCs is used "maybe 5% of the time", and called it "quite terrible".

Ram-Altman logs a Linux PC's memory every five minutes and, once a day, reports in if more than 10% of it is unused.

International Cyber Digest @IntCyberDigest 2h

‼️ The AI hacking agent China-linked hackers attacked 2,250 Microsoft 365 tenants with last month is now aimed at banks.

Microsoft says a Cambodia-based crime group has used ARTEX since October against financial firms in Southeast Asia and some big global banks.

Its agents exploit web-app flaws such as open file uploads at machine speed, plant web shells and drop remote-access malware.

International Cyber Digest @IntCyberDigest 3h

‼️ A US judge says Anthropic must face claims that it misleadingly advertised its $ 200-a-month Claude Max plan as "20x more usage than Pro" when it delivers about 6x a week.

The multiplier applies per five-hour session, but weekly caps don't scale with it. A Max subscriber can run out for the week before a Pro user does, the order notes.

By the plaintiffs' maths on Sonnet 4, the $100 Max 5x plan gets 3.5x Pro's weekly usage.

Judge Alex Tse found the ads plausibly misleading. The "per session" fine print sat two hyperlinks away from the sales pages.