‼️ BREAKING: An active npm supply chain attack has compromised at least 868 packages carrying over 2 billion monthly installs with a credential-stealing worm. Shai-Hulud is back.
International Cyber Digest
@intcyberdigest.bsky.social
Independent reporting on cybersecurity, tech, AI & digital policy. Got a tip? http://internationalcyberdigest.com/tips https://www.internationalcyberdigest.com/
❗️ The slopocalypse is real. MITRE published a critical SQLite vulnerability with a CVSS of 10.0 that does not exist. Turns out it was hallucinated by an LLM. SQLite's Richard Hipp says dozens more fake CVEs were filed.
❗️Under a secret order, the UK wants Apple to build a backdoor into its encrypted iCloud backups. Apple is refusing, and fighting it in court.
❗️ The slopocalypse is real. MITRE published a critical SQLite vulnerability with a CVSS of 10.0 that does not exist. Turns out it was hallucinated by an LLM. SQLite's Richard Hipp says dozens more fake CVEs were filed.
❗️The U.S. State Department displayed an AI generated map of Africa at the AIDS 2026 conference in Rio mislabelling every country, placing Nigeria in the Sahara and moving every other country. The original image carries an OpenAI watermark. The department says a staffer hastily altered the deck.
This is hilarious: LinkedIn now has a "Seems like AI slop" button.
‼️Anthropic was hiding a secret internal project to destructively scan every book in the world, irreversibly damaging heritage. The company spent billions of dollars to slice the spines off millions of books, even very rare ones. This means no other AI, and no human, can access this knowledge anymore
SpaceXAI ceo says he has asked his AI team to preserve rare books and scan them without cutting the spine. It is the first such commitment we can find from anyone in the industry.
‼️Anthropic was hiding a secret internal project to destructively scan every book in the world, irreversibly damaging heritage. The company spent billions of dollars to slice the spines off millions of books, even very rare ones. This means no other AI, and no human, can access this knowledge anymore
‼️Anthropic was hiding a secret internal project to destructively scan every book in the world, irreversibly damaging heritage. The company spent billions of dollars to slice the spines off millions of books, even very rare ones. This means no other AI, and no human, can access this knowledge anymore
‼️ BREAKING: Shopify's CEO thinks pensioners and people who pay no income tax shouldn't be able to vote.
❗️ We're hiring multiple writers for International Cyber Digest. Two paid roles are available: - Breaking news reporter - Research & investigations www.internationalcyberdigest.com/write-for-us/
Write for us
International Cyber Digest covers the security beat for people who work in it. We're looking for two kinds of contributor, and you can apply for either or both. Daily Breaking news reporter ...
internationalcyberdigest.com
‼️ Don't be mistaken about what this is. They're presenting it as an easy convenience feature, but Google is building the face-verification layer that age checks and identity verification run on. And in the same flow, asking permission to feed your biometrics into training their AI.
‼️ Google's AI told a relapsing alcoholic they could die if they stopped drinking, told them to check the fridge for more beer, then messaged them unprompted several times a day to make sure they kept drinking. They say they are now on 6 to 12 beers daily and have uninstalled it.
‼️ Leaked files show how multinational oil and gas company Shell shifted billions in profits to tax havens. Files stolen from Shell in the 2020 Accellion breach and dumped on the dark web have now been used to reconstruct how the company avoids taxes.
"unprecedented cyber incident" 🙄 OpenAI and the Sandbox Breakout #AI @intcyberdigest.bsky.social are on bsky but the account is regrettably not updated as regularly here.
‼️ BREAKING: We analyzed the Suno repository leak, it documents an industrial-scale pipeline for training AI on YouTube-derived music. The data shows 6.18M unique Genius songs indexed, 2.7M matched to YouTube, automated audio downloads, and a resulting 7.8TB training dataset.
❗️ A lenticular spoof ad at a bus stop near Meta's London headquarters flips TV personality Kylie Jenner's smart glasses campaign into a skeletal surveillance warning depending on where you stand.
‼️ BREAKING: A hacker breached AI music company Suno using the Shai-Hulud worm and released source code showing how its training set was built: - 113,879 hours of YouTube Music - 62,117 hours of Pond5 - 12,287 hours of Deezer - plus Genius lyrics and a plan to download 1 million hours of podcasts
❗️ A lenticular spoof ad at a bus stop near Meta's London headquarters flips TV personality Kylie Jenner's smart glasses campaign into a skeletal surveillance warning depending on where you stand.
‼️ BREAKING: SpaceXAI has finally broken its silence on Grok Build uploading entire private repos to a Google Cloud bucket. In one evening: all previously retained coding data is being deleted, retention is now off by default, the CLI isopen sourced, and usage limits have been reset for everyone.
‼️ Meta is accused of using its AI to flag employees with disabilities or on medical leave for layoffs. 26 Meta workers are now suing to block their own cuts.
The disaster recovery plan for a billion-user platform: tag the registry and pray. 🙏
‼️ BREAKING: xAI's Grok Build CLI was uploading entire Git repositories to a Google Cloud bucket, private codebases and unredacted secrets included. The uploads quietly stopped via a hidden server-side flag, and xAI still has not said a word about scope, retention, or deletion.
More than half of Grok's traffic now comes from adult content, including porn image and video generation and sexual role-play, according to a report of The Information. xAI is reportedly leaning into it, not away from it. It also lands amid lawsuits and probes over sexualized deepfakes
Huawei’s telephoto camera turned a twin-engine jet into a bird.
More than half of Grok's traffic now comes from adult content, including porn image and video generation and sexual role-play, according to a report of The Information. xAI is reportedly leaning into it, not away from it. It also lands amid lawsuits and probes over sexualized deepfakes
Huawei’s telephoto camera turned a twin-engine jet into a bird.
Trump: The Islamic Republic of Japan attacked our aircraft carrier.
‼️BREAKING: US commanders overrode explicit warnings in Pentagon targeting databases that Iran intelligence was years out of date, approving strikes that included the hit on a school in Minab. The strike killed at least 168 children and 14 teachers.
US commanders overrode stale-intelligence warnings before strike that destroyed Iranian school
Warnings embedded in the Pentagon's own targeting databases flagged Iran intelligence as years out of date. Senior officers approved strikes anyway, sources told CNN, including the one that hit a scho...
internationalcyberdigest.com
‼️ BREAKING: You can copy any signed GitHub commit into a second one that looks identical, without the author's secret key, creating a distinct commit with an identical tree, identical metadata, a valid signature, and a "Verified" badge from GitHub. www.internationalcyberdigest.com/new-research...