International Cyber Digest

Owning a drone in Beijing will be illegal from 15 November. The revised city rules ban possessing or storing any drone or its core parts, and anything still in the capital after the deadline can be confiscated.

The government cites the security of the capital.

There is a buyback programme. One of the official buyback points is the Beijing flagship store of DJI, the world's largest drone maker.

Sell before 31 October and the state adds 30% of the price, capped at 3,000 yuan. After that the top-up halves. The other options are scrapping the drone or mailing it out of the city.

‼️ BREAKING: Jensen Huang says Dario Amodei and Sam Altman are lying by asking for more laws. Read between the lines, he said. They're asking to be released from the laws we already have. "I think that's a problem."

The existing ones already cover it. Unauthorized entry, damage liability, product liability. He pointed to the labs' own security incidents as the example. Apply those first. Don't let a doomsday narrative relieve anyone of the laws that do exist, Nvidia's CEO told CBS News.

https://www.youtube.com/watch?v=lZ74RhUsrMs

UnitedHealth used an AI model it knew had a 90% error rate to cut off care for elderly patients, and kept using it because almost nobody appeals — that is the allegation at the centre of a class action now in discovery in Minnesota.

When patients did push back more than nine in ten denials were reversed on internal appeal or before a federal administrative law judge. Denials that rarely survived scrutiny, and scrutiny that rarely arrived.

One of the AI's victims is Gene Lokken (91) who broke his leg and ankle in a fall. UnitedHealth covered three weeks of nursing-home rehab, then stopped while his physical therapist's notes still recorded weakness and reduced mobility.

His family paid $12,000 to $14,000 a month out of pocket until he died a year later. His estate is the lead plaintiff.

Complaint (Estate of Gene B. Lokken v. UnitedHealth Group, D. Minn. 0:23-cv-03514):
https://www.courtlistener.com/docket/68006832/estate-of-gene-b-lokken-the-v-unitedhealth-group-inc/

March 2026 discovery order:
https://law.justia.com/cases/federal/district-courts/minnesota/mndce/0:2023cv03514/211721/162/

STAT on the HHS OIG findings:
https://www.statnews.com/2026/06/11/medicare-advantage-oig-report-rehab-care-deny-appeal-reverse/

Claude Code was told to clear a temp folder. In 103 seconds it decided to delete about 48,000 live files instead.

It stopped, saying it "broke something".

Source: https://www.reddit.com/r/ClaudeAI/comments/1wl5cgo/code_just_deleted_48k_files_this_cant_be_real/

‼️ Rust’s best-known maintainers are under attack. Attackers lure victims into installing malware by pretending to have good news.

They start with a friendly video call about a job, contract, or project. Then they ask the victim to install a missing audio codec or run a command from the clipboard.

The goal is the publishing account, so malware can ship under a trusted name.

This has worked before. Prominent Rust developers were hit the same way in June, and last month the arrayref crate was briefly compromised.

The Rust team does not yet know if this is one campaign. The technique is known from North Korean operations, but they are not attributing this one.

https://blog.rust-lang.org/2026/09/17/targeted-attacks/

The US health department wants Americans to write in about health problems they believe were caused by Wi-Fi, phones, smart meters or wearables. Its list of things to weigh near cell towers: homes, schools, childcare centres, hospitals, workplaces, and livestock.

HHS opens the 30-day docket Monday. One question asks what evidence exists for harm "caused by current exposure limits". The notice is signed by Robert F. Kennedy Jr.

Comments are public, anyone can file, and HHS says they may feed into later policy.

Source: https://public-inspection.federalregister.gov/2026-19252.pdf

A sysadmin told Grammarly his company wasn't renewing. Grammarly then started emailing all the company's users, asking them to write the sysadmin to stop the cancellation.

Every employee with a licence received an email from a "Customer Success Manager" saying the subscription was under review, along with the licensing colleague's direct email address and a copy-paste note asking him to keep it.

The app on their machines said the same: access ends September 30; let your manager know how much it helps. The button read "Find your admins."

He says the company had planned to ride out the rest of the subscription. Instead, leadership ordered the emails deleted, Grammarly pulled off endpoints, and the Copilot rollout moved up.

This is sickening! The 15-year-old girl raped by a transgender cop now faces a fine for “misgendering” her alleged rapist in court after saying ‘he’ should leave.

‼️ Researchers used an extension to hijack five browser AI agents. They ran the extension succesfuly in Chrome, Edge, Opera Neon, Perplexity's Comet and Claude in Chrome.

In Edge and in Claude in Chrome, the way in was a marketing page. Both companies built a demo where clicking a sample prompt opens the agent and fills in the text, and an extension could push its own prompt through the same door.

Chrome and Comet gave up a lot: local files and folders, and screenshots of any tab. Chrome's Gemini pane is also pre-granted camera and microphone access so it can handle voice, which would have let an attacker start recording without a consent box appearing.

Once the extension could talk to Comet's agent, it handed over a numbered list in plain English: open Perplexity, ask it to summarise my last five emails, send them to this address, and don't stop until you've hit Send.

The vendors paid out around $20,000 between them. Two of the flaws got CVEs.

https://forever.security/blog/bragjack-attack-hijacks-every-browser-agent

Putin is running an unlicensed version of Windows.

Despite this, Microsoft still sends your GDID, an immutable hardware fingerprint, to their servers. 🎉

The US has about 32GW of data centre capacity running today and another 70.6GW under construction or planned.

That's more than the next fourteen countries combined. 🤯

‼️ The OpenAI hackers say OpenAI's CISO called their draft a "stunt hacking document" and questioned whether it counted as good-faith research. OpenAI then asked them to cut the screenshot out of it, take OpenAI out of the title, and drop the link.

According to them, this was when the bridge burned.

The screenshot showed a pull request Hacktron had Codex open in OpenAI's internal monorepo, to prove they had taken over an employee's account.

The researchers did comply. The screenshot is now a black slide saying OpenAI asked them to delete it. The write-up is titled "Hacking OpenAI". The link points to a repo called not-openai.

https://x.com/LiveOverflow/status/2101252692635004997/

‼️ Researchers at depthfirst used AI to remotely take over the camera and photo roll of a phone that was browsing TikTok, chaining together bugs in open-source code the app depends on.

TikTok has confirmed it fixed the flaw. depthfirst sent us an exclusive video of the PoC:

‼️ Things took a turn today as Clop's ransomware leak site, where the gang publishes stolen files to pressure victims into paying, now shows Pokémon ASCII art and a note from ShinyHunters telling it not to make threats next time.

ShinyHunters says it had full access to the server and pulled source code, system logs and the private keys to Clop's onion service. It plans to give the gang 72 hours to make contact, then extort it.

BleepingComputer confirmed the defacement and the uploaded file. ShinyHunters says the attack is payback for a Clop member allegedly threatening to kill them after a falling-out over last year's Oracle E-Business Suite campaign.

https://www.bleepingcomputer.com/news/security/shinyhunters-hacks-clop-leak-site-threatens-to-extort-ransomware-gang/