Pinned Tweet
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
619
3,692
30,159
5,690,715
‼️ Crypto hardware wallet maker Keystone says hackers stole its customers' names, contact details and shipping addresses.
The records also show what each buyer ordered and paid.
Keystone now warns buyers never to enter their recovery phrase into a device they didn't order.
The records also show what each buyer ordered and paid.
Keystone now warns buyers never to enter their recovery phrase into a device they didn't order.
1
1
1
1,261
Source:
x.com/KeystoneWallet…
x.com/KeystoneWallet…
We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
0
0
0
52
‼️ An encrypted USB drive from SecZure has a backdoor that opens its files without the user's password.
Two built-in accounts with fixed passwords decrypt them, Binary Ninja's Xusheng Li found.
OpenAI's Codex broke Netac's FileLock in 7 minutes and saw it logging passwords.
Two built-in accounts with fixed passwords decrypt them, Binary Ninja's Xusheng Li found.
OpenAI's Codex broke Netac's FileLock in 7 minutes and saw it logging passwords.
5
8
90
5,830
❗️ Epic Games CEO Tim Sweeney called Steam's AI disclosure rule "abhorrent", accusing Valve of helping organise a "hate mob" against developers using AI.
15
2
73
6,214
International Cyber Digest retweeted
‼️ Proton is hosting a map of 300,000+ Flock surveillance device locations that Flock tried to get taken down.
Researcher Joshua Michael says he pulled them from Flock's own systems via a token left open to anyone.
Proton calls the takedown "an attempt to suppress information."
Researcher Joshua Michael says he pulled them from Flock's own systems via a token left open to anyone.
Proton calls the takedown "an attempt to suppress information."
57
936
6,016
367,546
❗️ An Indian certificate authority trusted by Chrome, Firefox and Apple had a private key that was the number 4.
More in our free weekly newsletter:
internationalcyberdigest.com/an-indian-cas-…
More in our free weekly newsletter:
internationalcyberdigest.com/an-indian-cas-…
20
23
217
12,381
Subscribe: internationalcyberdigest.com/newsletter/
0
1
1
2,307
❗️ A UN special rapporteur says she has to ask her family for pocket money because no bank will give her an account.
The US sanctioned Francesca Albanese in July 2025 under an order signed by Donald Trump. Gmail, Outlook and Netflix then locked her out, De Correspondent reports.
pe. Her credit cards were blocked within 24 hours, even those issued by European banks. Italy's Banca Etica turned her away as too risky.
Every Dutch bank card runs on Visa or Mastercard, and so do Geldmaat cash machines. A Dutch bank hit by US secondary sanctions could leave all its customers unable to pay or withdraw cash.
The same order has hit nine of the ICC's 18 judges, including its president. Judge Gocha Lordkipanidze had his Georgian bank accounts closed and was forced to repay his entire mortgage in one go.
On 9 October, the US sanctioned the entire International Criminal Court in The Hague.
The US sanctioned Francesca Albanese in July 2025 under an order signed by Donald Trump. Gmail, Outlook and Netflix then locked her out, De Correspondent reports.
pe. Her credit cards were blocked within 24 hours, even those issued by European banks. Italy's Banca Etica turned her away as too risky.
Every Dutch bank card runs on Visa or Mastercard, and so do Geldmaat cash machines. A Dutch bank hit by US secondary sanctions could leave all its customers unable to pay or withdraw cash.
The same order has hit nine of the ICC's 18 judges, including its president. Judge Gocha Lordkipanidze had his Georgian bank accounts closed and was forced to repay his entire mortgage in one go.
On 9 October, the US sanctioned the entire International Criminal Court in The Hague.
17
60
190
11,029
‼️ BREAKING: Japan's GMO Internet says the apparent hackers of its FX trading cloud are extorting it.
They threaten more rogue trades in client accounts at 70+ brokers, data leaks and ransomware
GMO won't pay and asked Tokyo to turn its 3-week-old offensive cyber powers on them
They threaten more rogue trades in client accounts at 70+ brokers, data leaks and ransomware
GMO won't pay and asked Tokyo to turn its 3-week-old offensive cyber powers on them
8
18
91
9,844
❗️ DOJ says DHS used an unnamed "investigative platform" to flag 20,000+ California voters as likely noncitizens.
USCIS scored matches to alien numbers. ICE field offices investigate each profile for possible crimes.
DHS began with "what appeared to be" the 2026 voter roll.
USCIS scored matches to alien numbers. ICE field offices investigate each profile for possible crimes.
DHS began with "what appeared to be" the 2026 voter roll.
3
6
31
7,202
International Cyber Digest retweeted
❗️ OpenAI CEO Sam Altman told Stanford students he no longer thinks the industry can "just patch all the bugs."
He says most leaders patched after Anthropic's Claude Mythos and moved on while "the models have kept going."
He says most leaders patched after Anthropic's Claude Mythos and moved on while "the models have kept going."
32
27
527
781,422
❗️ The Netherlands extradited Zheng Zhao to the US, where he's charged with conspiring to launder money for Cambodian scam centres.
Prosecutors say he arranged for a Bahamas bank to turn $ 36.9M+ of stolen money into Tether and send it to Cambodia.
They count 174 US victims.
Prosecutors say he arranged for a Bahamas bank to turn $ 36.9M+ of stolen money into Tether and send it to Cambodia.
They count 174 US victims.
11
23
127
10,461
❗️ A Texas trans rights group asked a court to make carrier Infobip unmask who sent election texts the group says impersonated it.
Infobip says it suspended the traffic but will name its customer only under legal process.
Infobip says it suspended the traffic but will name its customer only under legal process.
5
7
116
14,578
‼️ A suspected North Korean IT worker was hired by a South Korean firm under a false identity and did real development work, police say.
It is the South's first known case. Police are tracing the pay.
The probe began in February 2025 and surfaced only when a lawmaker asked.
It is the South's first known case. Police are tracing the pay.
The probe began in February 2025 and surfaced only when a lawmaker asked.
13
10
168
16,849