International Cyber Digest

‼️ Norwegian salmon farms run underwater robots that spot lice on passing fish with AI cameras, then kill them with a laser. Maker Stingray says 2,000+ of them guard 50 million+ salmon and trout around the clock, firing up to 5 pulses a second.

‼️ The owners of Steal a Brainrot, the Roblox game that hit a record 25M players at once, want Discord, Roblox and Comcast to unmask the hackers they say hijacked it. They accuse "Ponti," "Dre" and "Peach" of duping staff into installing malware, then planting a backdoor that made them admins of the live game. The suit says they handed out some of the game's most valuable items and offered it for sale on Discord. The owners say "Dre" admitted on a recording that they "found a vulnerability and took advantage of this."v

‼️ The US Justice Department secretly demanded LinkedIn records of who a group of journalists messaged over 18 months, to hunt the source of one military leak. The journalists wrote nearly 1,000 articles in that time. A US appeals court says fewer than 5% appear to touch the leak. It has ordered the demand narrowed, because it would expose confidential sources with no link to the probe. LinkedIn's bid to kill it outright failed. LinkedIn was also gagged for a year from telling anyone, the journalists included. The court wants that loosened too. "Confidentiality of sources is the lifeblood of a free press," the judges wrote.

‼️ BREAKING: Security journalist Brian Krebs says the man running Qilin, the world's most active ransomware gang, is 36-year-old Aleksey Yakovtsev of St. Petersburg. Researchers traced the boss's handle "Haise" through old forum names to a mail[.]ru address whose password was built from one of them. That address sits in leaked records from Russia's own hacked government services portal. Qilin has claimed 365+ victims in three months.

‼️ Apache's web server has a critical HTTP/2 flaw that can lead to remote code execution. A race condition in its header handling can corrupt memory. It was found by Anthropic's OSS Scanner and two Google researchers.

‼️ Meta left 47 code-execution bugs in its open-source AI libraries unpatched since March, so bug-bounty programme Zero Day Initiative has published them all as zero-days. Opening a booby-trapped config or model file in fairseq, FAIRChem or Detectron2 can run an attacker's code on your machine. There are still no patches. For fairseq, Meta told ZDI the project is no longer maintained and has been archived.

‼️ BREAKING: Hackers broke into the ScreenConnect remote-control consoles of 6 IT firms that run other companies' computers, and planted their own remote access on 286+ customer machines. Security firm Huntress counts 47 organisations hit so far, and says the numbers are still climbing. ConnectWise, which makes ScreenConnect, has disabled five third-party extensions in about 400 partner environments. It suspects the attackers pushed extra tools through them.

🚨 BREAKING: Jensen Huang caught upscaling behind his wife's back again

‼️ BREAKING: Nvidia CEO Jensen Huang had a second affair, this time with Kimberly Powell, vice president of health care. We found some photos of her. She is obviously married and has kids... Poor guy... Poor kids...

‼️ Terrorists sent hoax emails to about 6,300 Italian schools saying that a remote-detonated bomb was inside. 312 were evacuated. It also claimed a bomb was planted in Prime Minister Meloni's car, and was signed "Mikhail Andropov, leader of the Vilayat of Misoginistan." Schools in Scotland, Northern Ireland and Ireland got similar threats, all treated as hoaxes. The same alias claimed bomb threats to newsrooms in Ireland and Bulgaria last Friday. No government has blamed anyone, and Russia denies any role.

❗️ Reading certain Google Maps reviews takes a Google account now. Signed-out visitors who tap "see more reviews" or try to sort them hit a sign-in wall instead. Google sells the lock as a perk. Its prompt promises you can "Read and search through every review and photo." This is possibly to stop AI bots and scrapers from harvesting the reviews.

‼️ Google's AI search falsely told users that a German lawyer had lost his licence for embezzling client money. He has practised in Bremen without a break since 1992. The AI had mixed him up with a former Bremen lawyer accused of taking about €380,000 from clients.

‼️ Logitech is giving all ~7,000 employees, interns included, a day off to play GTA 6. CEO Hanneke Faber will spend launch day, 19 November, gaming in the office. "It's time to retire the stereotype that gaming is a waste of time," she says.

‼️ Swatters are faking 911 emergencies with AI voices. About 14% of dispatchers told APCO, a US 911 dispatchers' group, they've been targeted with AI tools. The fake callers say "uh" and "um" like real people. Some add AI gunfire or screaming in the background. In August, NPR reports, an AI voice phoned in a bomb threat to a California high school, and classes were cancelled. A forensic psychology professor told NPR he can clone his voice on ElevenLabs for under $20. He says the fakes are "going to be nearly impossible to detect."

‼️ Ivanti patched a 9.8-rated flaw that lets anyone run code on its Endpoint Manager servers, the systems companies use to control their PCs, without logging in. The bug, CVE-2026-121653, is a SQL injection in versions before 2024 SU8. A second flaw, rated 9.4, lets attackers add or delete trusted certificates in Ivanti's Cloud Services Application with no login. Ivanti says AI helped it find some of the 13 flaws it fixed this month, and warns more disclosures are coming. None are known to be exploited yet. The US cyber agency CISA already lists 38 Ivanti flaws that hackers have used.

‼️ Mythos flagged 45 security findings in curl, the tool inside billions of devices. So far only 7 are confirmed vulnerabilities, all rated low. curl's lead developer Daniel Stenberg says 37 are "just a bug" and one is completely false.

‼️ Recorded Future has mapped about 261,700 suspected fake web shops that clone real retailers to steal shoppers' card details. Some even ask for the bank's one-time code, letting criminals approve payments while victims think they're checking out. About 40% are still live.