International Cyber Digest
4.72K subscribers
376 photos
19 videos
2 files
45 links
Your weekly go-to cybersecurity newsletter, curated and commented on by our senior analysts.
Download Telegram
๐Ÿ‡ณ๐Ÿ‡ฑโ€ผ๏ธ People in the Netherlands are going to die tomorrow because of a breach. A national public health crisis is looming.

14 million people rely on hospitals and healthcare providers using ChipSoft for patient records.

A hypothetical thread ๐Ÿงต

Step 1: Cloud vs. On-Premise
โ†’ ~65% of ChipSoft hospitals run on-premise or privately hosted
โ†’ ~35% rely on ChipSoft's cloud/SaaS model

Step 2: On-Premise hospitals aren't safe either
They can still view historical patient data โ€” but cannot log new data. Morphine doses, lab results, new admissions โ€” all reverting to pen and paper. Elective surgeries cancelled, emergency capacity severely limited.

Step 3: Cloud hospitals are completely blind
No medical histories. No allergy warnings. No medication lists. Ambulances diverted. Total operational paralysis.

Step 4: The human cost
Based on ~21,000 weekly admissions across the Dutch ChipSoft network:
โ†’ Cloud hospitals: ~38 excess deaths in week one
โ†’ On-premise hospitals: ~20-30 excess deaths in week one
โ†’ Total: 58-68 excess deaths per week if the outage is sustained

Step 5: The domino effect
Within 48-72 hours, diverted ambulances overwhelm non-impacted hospitals. ICU capacity collapses nationwide. A localised IT failure becomes a national public health crisis.

Disclaimer: the above is hypothetical, as some data isn't public (such as cloud vs. on-premise ratios) and we don't have access to internal documentation or high-level architecture. We still felt it was important to post it to sound the alarm.

That said, does anyone know who breached ChipSoft? Or does anyone have tips / work at or with ChipSoft?
๐Ÿ˜ข11โค3๐Ÿ˜2๐Ÿคฃ2๐Ÿคฏ1๐ŸŽ‰1
๐Ÿšจโ€ผ๏ธ Microsoft has suspended the developer accounts of WireGuard and VeraCrypt, making it impossible for them to push updates in case of critical vulnerabilities.

WireGuard is used by hundreds of millions of users โ€” directly and indirectly via VPN apps like NordVPN and others.

WireGuard dev: "What if there were some critical RCE in WireGuard (...) exploited in the wild, and I needed to update users immediately? (...) In that case, Microsoft would have my hands entirely tied."
๐Ÿคฌ27๐Ÿ”ฅ1๐Ÿ˜1
โ€ผ๏ธ A New York Times reporter claims to have uncovered the true identity of Satoshi Nakamoto, the pseudonymous founder of Bitcoin.

https://nytimes.com/2026/04/08/business/bitcoin-satoshi-nakamoto-identity-adam-back.html?unlocked_article_code=1.ZVA.5_s8.hTKeCkV97kow&smid=tw-share
๐Ÿคฃ19๐Ÿคฏ1
โ€ผ๏ธ Tesla is remotely disabling cars and emailing owners who have been using FSD activation hacks in countries where FSD is not yet permitted.

Users report they had no say in it, Tesla simply altered the software remotely and is forcing them to update. Disabling connectivity isn't possible on most cars due to built-in eSIM.

This comes at a very sensitive time, Tesla is awaiting FSD approval by Dutch regulatory authority RDW in Europe. Can't have illegal vehicles driving around.

Sources told us that RDW will not approve FSD for a 2nd time tomorrow, meaning EU users will have to wait even longer...
๐Ÿ’ฉ11๐Ÿ˜2โค1๐Ÿคฌ1
๐Ÿšจ BREAKING: The FBI has successfully extracted deleted Signal messages from a suspect's iPhone via notification storage, the place where all your notifications are stored for up to one month.

Notification storage stores data from all messaging apps, it's a big flaw in iOS. But there's a way to turn it off...

Go to iOS Settings โ†’ Notifications โ†’ [App Name] โ†’ Show Previews and set it to Never.

You can also do this globally under Settings โ†’ Notifications โ†’ Show Previews โ†’ Never

Also don't forget to turn on Advanced Data Protection in your iCloud settings if you really want to OWN your data.
๐Ÿ˜ฑ20๐Ÿ”ฅ7โค1๐Ÿ™1
๐Ÿšจ WARNING: A 0day vulnerability in Adobe Acrobat Reader is being actively exploited in the wild for 4 months now.

Simply opening a malicious PDF can lead to data theft and potentially full system compromise.

Adobe has not released a patch for this vulnerability.

Source: https://esecurityplanet.com/threats/adobe-acrobat-reader-zero-day-exploited-in-active-pdf-attacks/
๐Ÿ‘13๐Ÿ”ฅ3๐Ÿคฃ3
๐Ÿšจ BREAKING: CPUID has been compromised as users were served malicious HWMonitor and CPU-Z downloads through the official website.

The malware was hosted on r2[.]dev.

The setup application contains Cyrillic (Russian) characters and displays HWiNFO instead of HWMonitor.

According to the dev, the malicious files were hosted for approx 6 hours before taken down.
๐Ÿ˜ฑ10โค4๐Ÿ”ฅ2๐Ÿคฃ2
โ—๏ธ WhatsApp moved status updates to the Chats tab in the latest beta, bringing ads closer to where users spend most of their time.

Likely a push to make advertising more viable.
๐Ÿ’ฉ25๐Ÿ”ฅ2
๐Ÿšจ BREAKING: Rockstar Games has been breached through the Anodot compromise we posted about 3 days ago. The companies still haven't disclosed anything about the breach.

Anodoth's software integrates with AWS, Google, Azure, Cisco, Oracle, Salesforce and more.

According to Anodot there is only a "Unresolved incident: Crucial Maintenance in Frankfurt Cluster."... Nothing mentioned about a breach.

Anodot is a strange company, we've heard they haven't replied to a single email journalists have sent. And their AI assistant looks like it's having a rough day...
๐Ÿ˜ญ12๐Ÿคฃ3โค2๐Ÿ‘1๐Ÿ”ฅ1