GLOBEALERT

Feed

Open sources, classified and cross-checked. 49+ stories.

CYBER4h agoThe 'Russian Google,' war spoils for Ukraine.El Mundo
CYBER4h agoOpenAI announces arrest of employee suspected of having placed a microphone in the companyThe technology firm fired an employee after discovering a hidden device in its offices, alerting the FBI about the incident. The device, with advanced encryption, was found by the security team. There is no evidence of unauthorized access to sensitive information.Clarín
CYBER4h agoAnthropic Finds Ingredients for Future AI WormsAnthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.Dark Reading
CYBER5h agoEU watchdog urges smart glasses to clearly signal when recordingAdvisory comes amid growing concern about the devices being used to secretly record girls and women.Al Jazeera [en]
CYBER5h agoF.B.I. Disrupts Pyongyang Revenue Stream: North Koreans in U.S. Tech JobsNYT US
CYBER6h agoJPMorgan Chase blocks outside AI agents like Muse, Instinct from directly accessing accountsJPMorgan Chase CEO Jamie Dimon warned of rogue agents operating at scale and said the bank is building defensive tools.CNBC
CYBER6h agoHackers raise temperatures on fridges in hundreds of French supermarketsFrench investigators are on the hunt for hackers who raised temperatures on refrigerators at hundreds of supermarkets, sparking fires and food losses. CBS News reporter Inaya Folarin Iman has more.CBS News
CYBER6h agoAnthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsThe Hacker News
CYBER6h agoDocker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as AnotherA flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal account into an organization, Docker said in a security advisory on October 12.The Hacker News
CYBERBREAKING7h agoAttacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So FarThe Hacker News
CYBER7h agoEFCC chair warns Nigerian girls against sextortion“If you engage in cybercrime; if you become an account mule for Yahoo boys; if you blackmail people online, you are not just committing a crime; you are destroying Nigeria’s image,” EFCC chair Olukoyede said. The post EFCC chair warns Nigerian girls against sextortion appeared first on Premium Times Nigeria.Premium Times
CYBER7h agoSAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential TheftThe Hacker News
CYBER7h agoCompanies are building with AI — and exposing new security risksThe amount of AI-related infrastructure exposed to the public internet jumped 63% in nine months, according to new Censys data shared first with Axios.Why it matters: The AI boom isn't just creating new models and chatbots. It's creating a sprawling layer of software that companies will also need to inventory, patch and secure.Threat level: Many of these tools connect AI applications to sensitive corporate data and other services, creating potential entry points for hackers looking to access company systems."It's a little bit beyond just like the tool itself, but these [tools] talk to some reaAxios
CYBER7h agoHow to detect a fake QR code: warning signs to avoid scams and protect your bank accountScanning a fake QR code is usually not enough; most actions require an additional step. 'Quishing' involves combining a manipulated QR with a fake page to steal your data.Clarín
CYBER8h agoGitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to HijackingThe Hacker News
CYBER8h agoAfter Danfoss, hackers strike other refrigeration systems used in FranceOn Monday night, stores using Dixell refrigeration equipment were targeted by hackers. The attack method mirrored that used the previous day in incidents affecting several hundred supermarkets.Le Monde [en]
CYBER11h agoXandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual OrientationThe Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying ​Grindr users' sensitive data to advertisers. The administrative penalty is the largest issued by the data protection watchdog, arguing the case merited a high fine because of the "very serious" nature of the breach. The infringementsThe Hacker News
CYBER11h agoFrench fridge fright: Why supermarkets have become target for hackersAl Jazeera [en]
CYBER11h agoIran threatens Gulf data centres: How exposed is the region’s internet?Al Jazeera [en]
CYBER12h agoHackers heat French supermarket fridges, sparking fires and spoiling foodFrance 24 [en]
CYBER12h ago[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity ControlsThe dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate. A compromised account that looks legitimate at first could become the starting point for a muchThe Hacker News
CYBER13h agoTikTok denies restricting access in Northern NigeriaSocial media platform, TikTok says it did not restrict access to its network in Northern parts of Nigeria. The post TikTok denies restricting access in Northern Nigeria appeared first on Vanguard News.Vanguard Nigeria
CYBER13h agoHackers heat French supermarket fridges, sparking fires and spoiling foodFrance 24 [en]
CYBER13h agoLG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local NetworkThree vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmwareThe Hacker News