Marius Avram retweeted
Wild story from @briankrebs: 1) Dubrovsky, the arrested ransomware negotiator, knew ShinyHunters stole FBI data but never told FBI; 2) an exec from another large US negotiating firm played an active role operating ShinyHunters' victim extortion website
krebsonsecurity.com/2026/10/…
Marius Avram retweeted

International Cyber Digest@IntCyberDigestOct 18
Europe!
EuropeConnected via Europe App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
‼️ BREAKING: Unauthenticated attackers are hijacking Plex Media Servers.
Exploit code was published on GitHub on 16 October, immediately after exploitation in the wild began.
A researcher reports a honeypot running Plex was turned into a crypto miner and a proxy.
Marius Avram retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
Marius Avram retweeted
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number.
More: 404media.co/heres-what-teleg…
Marius Avram retweeted

International Cyber Digest@IntCyberDigestOct 16
Europe!
EuropeConnected via Europe App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
🚨 BREAKING: Suspected Chinese spies hacked BeyondTrust Remote Support servers with a zero-day, CVE-2026-102764.
One was hosted by BeyondTrust itself, and they were alerted instantly, but their automated 3rd party triage tool closed the alerts as false positives.
Marius Avram retweeted
Apple calls the iPad a computer.
So I built Linux for it.
I built LinPad OS - Linux for iPad.
- Desktop windows + a real terminal
- No jailbreak. No VM.
Free & open source (pre-release).
What is your iPad missing?
linpados.com
#Linux #iPad #OpenSource
Marius Avram retweeted
NEW @citizenlab report We uncovered an Israeli firm using online ads to run vast spy operation
This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads.
45 devices at @AJEnglish confirmed infected
citizenlab.ca/research/how-d…
Marius Avram retweeted
Curl has one high cve from very long time leading to possible RCE, and you now what @pruvadev did? reproduced.
CVE-2026-92392: curl HTTP/2 upload Use-After-Free RST STREAM HTTP 1 1 REQUIRED/REFUSED STREAM leading to potential RCE
pruva.dev/reproductions/REPR…
Marius Avram retweeted
🚨 PoC RELEASED — Splunk Enterprise RCE, no login needed
CVE-2026-76268 | CVSS 9.8 (Splunk)
Anyone who can reach the Patroni API on a
search head cluster member can run OS
commands. A public repo now claims a PoC.
⚠️ Affected: 10.2.0–10.2.6 • 10.4.0–10.4.2
✅ Fixed: 10.2.7 • 10.4.3
Workaround: disable the PostgreSQL sidecar
(unless you use Edge Processor, OpAmp, SPL2).
• Not in CISA KEV
• No known exploitation
• PoC not run or verified by ThreatWire
Patch today, and keep Patroni off
untrusted networks.
Full breakdown 👇
threatwire.tech/news/splunk-…
#Splunk #CVE #Poc #threatWaire
Marius Avram retweeted
🚨 CVE-2026-104935 🚨
Ivanti Connect Secure authentication bypass (CVSS 10.0).
Discover every Ivanti VPN you run and see which ones are exploitable.
Run directly with Neo: go.projectdiscovery.io/CVE-2…
Marius Avram retweeted

International Cyber Digest@IntCyberDigestOct 14
Europe!
EuropeConnected via Europe App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
‼️BREAKING: Hackers are planting webshells on Nextcloud servers through a critical Collabora flaw.
CVE-2026-110447 in the built-in CODE Server app lets anyone run commands without logging in.
Collabora says update to 26.4.303 or delete it.
Marius Avram retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
Marius Avram retweeted

International Cyber Digest@IntCyberDigestOct 13
Europe!
EuropeConnected via Europe App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
🚨 BREAKING: Hackers broke into Meta’s private GitHub repo and stole their source code.
They got in with an employee's stolen credentials and took personal data on ~1,500 people, mostly US employees, stored there against Meta policy…
Marius Avram retweeted
We are currently rapidly reacting to CVE-2026-104935, an authentication bypass vulnerability enabling unauthenticated remote command execution on Ivanti Connect Secure appliances.
Active watchTowr Platform clients have been made aware of their exposure. Reach out for support.
Marius Avram retweeted
Very excited to share details on the bugs used in our full chain Chrome exploit! We used three bugs (V8 corruption, V8 sandbox escape, and renderer sandbox escape via Crashpad). The third bug is my favorite!
Marius Avram retweeted
Introducing Muse Wonder, our new family of frontier models with state of the art performance for personal and professional agentic work.
Marius Avram retweeted
Cyberattack on French supermarkers. Someone remotely took over refrigeration controllers and made them to defrost. Target temperature set to 50°C. Staff opening freezers in the morning were hit by a wave of hot air. Millions of euros lost. France spent years debating food sovereignty to depend on a firmware update? bfmtv.com/economie/consommat…
Marius Avram retweeted
#GitHub repos hit by a new supply chain attack - GhostAction attackers compromised maintainer accounts and injected malware into 346 repositories, including #Uber's athenadriver stealing cloud&AI credentials, CI/CD secrets:
#SoftwareSupplyChainSecurity
👇
socket.dev/blog/ghostaction-…
































