GLOBEALERT

Feed

Open sources, classified and cross-checked. 457+ stories.

CYBERSep 18Hackers breached OpenAI, adding to fever pitch of security and safety concernsA small group of cybersecurity researchers said Sunday that they broke into OpenAI earlier this year, an announcement that has added a new element of alarm around AI security and safety.NBC News
CYBERSep 18New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code ExecutionWordPress today released patches to fix a new set of vulnerabilities in its core software, one of which could allow a crafted web link, opened by a logged-in administrator, to install a theme from the official WordPress.org directory without anyone clicking Install. The security firm pwn.ai, whose researchers reported the flaw, calls the attack chain Click2Shell. On its own the flaw onlyThe Hacker News
CYBERSep 18AI security experts say they used Claude to hack ChatGPTCybersecurity researchers said they were able to use Anthropic's Claude AI platfom to penetrate ChatGPT in "less than 72 hours."CBS News
CYBERSep 18Women cautioned about cybercrime, threats to privacyWomen are being warned about the risks of cybercrime and threats to their privacy. This highlights a general security concern for a specific demographic.The Hindu
CYBERSep 18Researchers claim to have hacked OpenAI using Anthropic's Claude AIHacktron AI managed to access OpenAI's ChatGPT accounts using an Anthropic model, revealing flaws in a forum managed by Discourse. OpenAI fixed the vulnerability in 14 hours and rewarded Hacktron. The intrusion highlights the growing risk of AI-driven cyberattacks.Clarín
CYBERSep 18Online Scams: The Shady World of Fraudulent Investment SitesUsing software from a company in Israel, scammers reel in gullible investors and steal all their money. DER SPIEGEL dove deep into this world of greed-fueled criminal networks - and found a hero.Spiegel International [en]
CYBERSep 18REPLAY: Macron orders plan to counter 'Russian hybrid attacks'President Emmanuel Macron on Friday said he had ordered measures to shield France's key infrastructure and defence industry sites from increasing Russian hybrid attacks. The announcement came as Macron spoke to the press after meeting in Paris with political party leaders to discuss recent developments in the international situation including the wars in the Middle East and Ukraine. Watch his press conference in full above.France 24 [en]
CYBERSep 18Russian hybrid attacks against Europe intensifying, says MacronThe French president says he has tasked the government with protecting critical infrastructure and defence industry sites.BBC World
CYBERSep 18Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege EscalationThe Hacker News
CYBERSep 18CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-39964 Linux Kernel Race Condition Vulnerability CVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-CISA
CYBERSep 18CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the CISA
CYBERSep 18UN Crime Congress: Technology is transforming crime – and the response to itSitting in her Vienna office ahead of a pivotal UN gathering in Abu Dhabi, Monica Juma is focused on a simple reality: crime has evolved faster than many of the institutions designed to combat it.UN News
CYBERSep 18Computer failure, hacking, kidnapping... Revolut confirms an identity impersonation incident affecting 680 customersNiega que haya recibido una petición de rescate de tres millones de dólares y asegura que ha puesto el incidente en conocimiento de las autoridades competentes LeerEl Mundo
CYBERSep 18An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.In July 2025, someone registered a domain that used to belong to a content delivery network. The CDN had been wound down years earlier, and the domain it served assets from was allowed to expire. What it had not lost were its callers. Thousands of websites, code repositories, and documentation pages still carry hard-coded references to hostnames beneath it. The new owner holdsThe Hacker News
CYBERSep 18Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding AgentsThe Hacker News
CYBERSep 18WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension StorageCybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new malware family, per OpenSourceMalware, exhibits functional overlaps with two malware strains associated with the Democratic People's Republic of Korea's (DPRK) Contagious Interview campaign: BeaverTail andThe Hacker News
CYBERSep 18Russia shares AI-generated Putin selfie as use of artificial content spreads among Europe's politiciansThe Russian embassy in South Africa recently shared an AI-generated image of BRICS leaders. It's part of a growing trend of public figures and institutions using AI in their communication, which researchers say can undermine public trust.EuroNews [en]
CYBERSep 18Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm StealerA financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven via the npm package registry. "The developer likely wrote the malware using a large language model (LLM), an assessment made with high confidence based on verbose comments, placeholder code, and statistical token-analysis patterns,"The Hacker News
CYBERSep 18‘Just ask Grok’: How ISIL is using Big Tech’s AI to build bombsAl Jazeera [en]
CYBERSep 18Hackers used Anthropic's Claude to break into OpenAIUn equipo independiente de investigadores de seguridad dedicado a la búsqueda de vulnerabilidades accedió al sistema interno de código de OpenAI, poniendo de manifiesto los crecientes riesgos de las ciberamenazas automatizadas LeerEl Mundo
CYBERSep 18Full picture of the 'mansion with a monthly rent of approximately 4.2 million yen' used by a fraud group targeting Japanese people in Bangkok - Thailand HyperlinksFull picture of the 'mansion with a monthly rent of approximately 4.2 million yen' used by a fraud group targeting Japanese people in Bangkok, featuring a violin-shaped pool, 10 bedrooms, and 18 bathrooms. Thailand Hyperlinks. Special fraud base exposed in Thailand was a mansion with 4.2 million yen rent. Sophisticated manual targeting Japanese people impersonating Miyagi Prefectural Police (Sendai Broadcasting) Yahoo! News. Rooms with windows blocked, cruel threats... Inside story of a fraud case based in Indonesia [Kagawa Prefecture] ['Darkバイト' crime] Asahi Shimbun. 15 Japanese and others detained in a luxury residence in Bangkok, 'police notebook' confiscated in special fraud – Thailand Jiji.com. Like a 'palace'... why do criminal organizations have 'good workplaces'? 14 people including Japanese detained in Thailand TV Asahi News.google · japan
CYBERSep 18OpenAI breached by researchers using Anthropic modelsSecurity company hacked into AI lab using tools from its rivalFinancial Times
CYBERSep 18The NYT claims that Microsoft and OpenAI knew that using journalistic articles was theftOpenAI is accused of using millions of articles to train AI, including content from the New York Times, which sparked legal lawsuits. Microsoft and OpenAI defend the use under "fair use," while publishers claim compensation for the alleged misuse of their material.Clarín
CYBERSep 17Meta criticized internally for its "insufficient" safeguards against AI-manipulated contentMeta retira videos manipulados con IA tras críticas del Consejo de Supervisión por violar normas contra desinformación y acoso. El consejo exige medidas más firmes para frenar deepfakes en redes sociales, subrayando el acoso a mujeres que alzan la voz en temas sociales.Clarín