Forwarded from International Cyber Digest
π¨βΌοΈ BREAKING: Crunchyroll breached through outsourcing partner in India.
A threat actor exfiltrated data from Crunchyroll's ticketing system and also managed to pull 100 GB of personally identifiable customer analytics data.
We've analyzed sample data and it includes IP addresses, email addresses, credit card details, and more.
An employee of their outsourcing partner Telus had executed malware on his system, which gave a threat actor access to Crunchyroll's environment.
The threat actor told us the breach happened on March 12, 2026. Crunchyroll revoked their access after 24 hours.
They also said Crunchyroll is ignoring all messages and still hasn't publicly disclosed the breach.
A threat actor exfiltrated data from Crunchyroll's ticketing system and also managed to pull 100 GB of personally identifiable customer analytics data.
We've analyzed sample data and it includes IP addresses, email addresses, credit card details, and more.
An employee of their outsourcing partner Telus had executed malware on his system, which gave a threat actor access to Crunchyroll's environment.
The threat actor told us the breach happened on March 12, 2026. Crunchyroll revoked their access after 24 hours.
They also said Crunchyroll is ignoring all messages and still hasn't publicly disclosed the breach.
π₯47π€‘25β€6β1
Oneplus India CEO Robin Liu steps down!
Oh, also, the OnePlus 16 fate in India is "unlikely" if you are waiting for it.
Goodbye OnePlus
Follow @TechLeaksZone
https://m.economictimes.com/industry/cons-products/electronics/oneplus-india-ceo-robin-liu-steps-down-moves-back-to-china/articleshow/129768007.cms
Oh, also, the OnePlus 16 fate in India is "unlikely" if you are waiting for it.
Goodbye OnePlus
Follow @TechLeaksZone
https://m.economictimes.com/industry/cons-products/electronics/oneplus-india-ceo-robin-liu-steps-down-moves-back-to-china/articleshow/129768007.cms
The Economic Times
OnePlus India CEO Robin Liu steps down, moves back to China
OnePlus India CEO Robin Liu has stepped down. This comes as the company restructures its global business. Liu is currently serving his notice period. The company is attempting to retain him. He has already returned to China. His last day is March 31. Thisβ¦
π€‘40π7
The guy who earlier denied rumours about the OnePlus shutting down is now himself stepping down as the OnePlus India CEO lol
Follow @TechLeaksZone
Follow @TechLeaksZone
π€£107π€‘14β4
Forwarded from XIAOMI Fuckups
HyperOS 4 Leaked: Xiaomi Rebrands to AIOS Because "Almost iOS" Was Too Obvious
Google and Samsung presentations: AI, AI, AI, AI.
Xiaomi HyperOS 4: AI, AI, AI, AI
Everyone is using the same marketing script now. Xiaomi's next-gen software is so full of AI that they are calling it AIOS internally where the biggest breakthrough is likely an AI that figures out which background app to kill first in the HyperOS 4 π
Since Meizu owns and operates the Flyme 'AIOS', the meme company will likely call it as Xiaomi HyperAIOS π
Follow @Xiaomifuckup
Google and Samsung presentations: AI, AI, AI, AI.
Xiaomi HyperOS 4: AI, AI, AI, AI
Everyone is using the same marketing script now. Xiaomi's next-gen software is so full of AI that they are calling it AIOS internally where the biggest breakthrough is likely an AI that figures out which background app to kill first in the HyperOS 4 π
Since Meizu owns and operates the Flyme 'AIOS', the meme company will likely call it as Xiaomi HyperAIOS π
Follow @Xiaomifuckup
105π€£115π€‘6β€3π3π1π1
Introducing Apple Business
Apple Business combines built-in mobile device management, business email and calendar services with custom domain support, and enhanced discoverability through 'Ads in Apple Maps' to reach local customers.
Follow @TechLeaksZone
https://www.apple.com/newsroom/2026/03/introducing-apple-business-a-new-all-in-one-platform-for-businesses-of-all-sizes/
Apple Business combines built-in mobile device management, business email and calendar services with custom domain support, and enhanced discoverability through 'Ads in Apple Maps' to reach local customers.
Follow @TechLeaksZone
https://www.apple.com/newsroom/2026/03/introducing-apple-business-a-new-all-in-one-platform-for-businesses-of-all-sizes/
Apple Newsroom
Introducing Apple Business β a new all-in-one platform for businesses of all sizes
Apple today announced Apple Business, a new all-in-one platform that allows companies to manage devices and reach more customers.
π€‘34π8πΎ2
Forwarded from vx-underground
Whoa whoa whoa. Everyone CLAM down for a second.
Earlier today someone broke the news that there was a supply chain attack impacting LiteLLM which had over 97 MILLION installs. Initially it was reported the payload was vibe coded which resulted in the payload failing.
HOWEVER, this has been determined to be NOT TRUE. The payload was a SUCCESS. The payload failed in specific edge cases (currently unknown). The Threat Actor(s) managed to exfiltrate data from 500,000 infected machines (approx. 300gb of data).
I have confirmed this from three different sources. The initially news which is spreading all over social media is incorrect and this is actually a very big bamboozle.
They had one short, one opportunity, and did indeed seize it (but only failing in specific and unknown edge cases).
It's all over for LLM-dependency nerds. Also, in a bit of irony, LiteLLM is SOC2 certified by Delve.
This is very big shenanigans for a Tuesday.
Earlier today someone broke the news that there was a supply chain attack impacting LiteLLM which had over 97 MILLION installs. Initially it was reported the payload was vibe coded which resulted in the payload failing.
HOWEVER, this has been determined to be NOT TRUE. The payload was a SUCCESS. The payload failed in specific edge cases (currently unknown). The Threat Actor(s) managed to exfiltrate data from 500,000 infected machines (approx. 300gb of data).
I have confirmed this from three different sources. The initially news which is spreading all over social media is incorrect and this is actually a very big bamboozle.
They had one short, one opportunity, and did indeed seize it (but only failing in specific and unknown edge cases).
It's all over for LLM-dependency nerds. Also, in a bit of irony, LiteLLM is SOC2 certified by Delve.
This is very big shenanigans for a Tuesday.
π€‘36β€3π2π1
Forwarded from Winaero
Open Firefox and type about:config in the address bar.
Click "Accept the Risk and Continue."
Search for browser.ipProtection.enabled.
Toggle the value to true.
Restart Firefox to ensure the new toolbar icon appears.
The VPN requires a Mozilla account and has a 50GB monthly data limit. Users can manage settings through a dedicated interface in the toolbar or privacy settings menu, allowing them to bypass restrictions for individual sites. However, this feature is strictly limited to Firefox traffic; it does not encrypt data system-wide and does not replace the robust security of a standalone VPN client.
Please open Telegram to view this post
VIEW IN TELEGRAM
β€βπ₯71π7π€‘7β€6
Google Pixel 11 Render
Google is continuing the same design for the 3rd time now.
- Powered by Google Tensor G6
- 7-core chipset
- Manufactured by TSMC on 2nm node
- MediaTek M90 modem
- Titan M3 chipset for security
- 3D Face Unlocking
Follow @TechLeaksZone
Google is continuing the same design for the 3rd time now.
- Powered by Google Tensor G6
- 7-core chipset
- Manufactured by TSMC on 2nm node
- MediaTek M90 modem
- Titan M3 chipset for security
- 3D Face Unlocking
Follow @TechLeaksZone
π€‘90π34β€8π2
Supply chain attack on axios 1.14.1.
One additional version is affected: 0.34.0
https://fixvx.com/feross/status/2038807290422370479?s=20
One additional version is affected: 0.34.0
https://fixvx.com/feross/status/2038807290422370479?s=20
vxTwitter / fixvx
π 16.12K π 4K
π 16.12K π 4K
Feross (@feross)
π¨ CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise.
This is textbook supply chain installerβ¦
The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise.
This is textbook supply chain installerβ¦
π€‘17β€1
Forwarded from vx-underground
What the fuck is going on in Europe?
Who steals 12 TONS of KitKats? What do you even do with that many KitKats?
Who steals 12 TONS of KitKats? What do you even do with that many KitKats?
π€£122π€‘29β€8π7π
1
Geekbench discovered that Intel's Binary Optimization can vectorize workloads, boosting some Geekbench 6.3 scores by up to 30%.
Geekbench 6.3 scores increase when BOT is enabled compared to when it is disabled. The difference is an increase of 5.5% scores in the single-core and the multi-core when BOT is enabled and with that, the 6.3 workload scores also increased, with scores for two workloads (Object Remover and HDR) increasing by up to 30%.
However, Geekbench 6.7 single-threaded and multi-threaded scores remained roughly the same with BOT enabled and disabled.
Follow @TechLeaksZone
Geekbench 6.3 scores increase when BOT is enabled compared to when it is disabled. The difference is an increase of 5.5% scores in the single-core and the multi-core when BOT is enabled and with that, the 6.3 workload scores also increased, with scores for two workloads (Object Remover and HDR) increasing by up to 30%.
However, Geekbench 6.7 single-threaded and multi-threaded scores remained roughly the same with BOT enabled and disabled.
Follow @TechLeaksZone
β€30π€‘14π€1
Forwarded from Mystic Leaks
What's up! We have some bad
The Pixel 10 devices (excluding the 10a) are getting a bootloader update in one of the future Android releases that increments the anti-rollback version for the bootloader.
This means that, after upgrading, you won't be able to downgrade to a lower version of Android. You might need to sideload a full OTA image again to avoid bricking in certain situations.
By the way, we're working on Pixel 11 leaks and a chemical element (13), stay tuned!
The Pixel 10 devices (excluding the 10a) are getting a bootloader update in one of the future Android releases that increments the anti-rollback version for the bootloader.
This means that, after upgrading, you won't be able to downgrade to a lower version of Android. You might need to sideload a full OTA image again to avoid bricking in certain situations.
π€‘52β€4πΏ1π1