GLOBEALERT
Sign in

Feed

Open sources, classified and cross-checked. 481+ stories.

AllConflictMilitaryPoliticsBusinessSci & TechCyberDisasterHealthWorld
24h3 days7 days30 daysAll·All regionsNorth AmericaSouth AmericaWestern EuropeEastern EuropeBalticsMiddle EastNorth AfricaSub-Saharan AfricaSouth AsiaEast AsiaOceania
CYBERBREAKINGSep 17Anthropic says terror groups used AI for weapons development, planningCBS News
CYBERSep 17Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as RootThe Hacker News
CYBERSep 17AI makes it "easier than ever" for adversaries to target U.S. military, experts sayCBS News
CYBERSep 17ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New StoriesAttackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, exposed services, old bugs, weak logins, and software sold like a monthly subscription. Some attacks use new tricks. Others just reuse what was already lying around. Both work often enough. So the threat landscape is not getting cleaner. It is justThe Hacker News
CYBERSep 17Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host FilesThe Hacker News
CYBERSep 17Terror groups take advantage of AI developmentsAmid recent warnings by AI leaders over the risks of rapid tech development, Leigh Kiniry reports on how terrorist groups take advantage of AI.CBS News
CYBERSep 17Cyberattacks are a real threat to ports and waterways, Coast Guard official saysCBS News
CYBERSep 17Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal PasswordsThe Hacker News
CYBERSep 17Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS ZoneThe Hacker News
CYBERSep 17Schneider Electric PowerChute Serial ShutdownView CSAF Summary Schneider Electric is aware of vulnerabilities in its PowerChute Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktops, servers and workstations. Failure to apply the remediation provided below may risk improper authentication validation which could result in disruption of operations and access to system data. The following versions of Schneider Electric PowerChute Serial Shutdown are affected: PowerChute Serial Shutdown vers:intdot/<=1.5, 1.6 (CVE-2026-CISA
CYBERSep 17ABB Ability EdgeniusView CSAF Summary ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulnerability that may allow a locally authenticated user or compromised container workload to gain elevated (root) privileges on affected systems. Once root access is obtained, the attacker can effectively gain complete control of the system The following versions of ABB Ability Edgenius are affected: Ability Edgenius >=3.CISA
CYBERSep 17Bransys ELDView CSAF Summary Successful exploitation of these vulnerabilities could allow unauthorized access to telemetry data and firmware. The following versions of Bransys ELD are affected: Android <11.00.00 (CVE-2026-86520, CVE-2026-86689, CVE-2026-77960) iOS <1.1.54 (CVE-2026-86520, CVE-2026-86689, CVE-2026-77960) CVSS Vendor Equipment Vulnerabilities v3 7.5 Bransys Bransys ELD Use of Hard-coded Credentials, Cleartext Transmission of Sensitive Information Background Critical Infrastructure Sectors: Transportation Systems Countries/Areas Deployed: United States Company Headquarters Location: UCISA
CYBERSep 17Schneider Electric NetBotz 5 750/755View CSAF Summary Schneider Electric is aware of multiple vulnerabilities in its NetBotz 5 – 750/755 products.The NetBotz 5 – 750/755 products are security and environmental monitors providing temperature, humidity, leak, smoke, vibration, door contact, and video monitoring capabilities. Failure to apply the remediation provided below may risk arbitrary or remote code execution over the local network, which could result in device manipulation and unauthorized data access. The following versions of Schneider Electric NetBotz 5 750/755 are affected: NetBotz 5 750 vers:intdot/<=5.5.2 (CVE-2026CISA
CYBERSep 17Mitsubishi Electric GX Works3 and Motion Control SettingsView CSAF Summary Successful exploitation of this vulnerability could allow a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker to view, tamper with, destroy, or delete control programs. The following versions of Mitsubishi Electric GX Works3 and Motion Control Settings are affected: Mitsubishi Electric GX Works3 vers:all/* (CVE-2026-15688) Mitsubishi Electric Motion Control Settings (Software packaged with GX Works3) vers:all/* (CVE-2026-15688) CVCISA
CYBERSep 17Hitachi Energy FACTS Control Platform (FCP)View CSAF Summary Hitachi Energy is aware of vulnerabilities that affect the FACTS Control systems with GWS component listed in this document. An attacker exploiting these vulnerabilities can cause impact on confidentiality, integrity and availability of the product. Following FACTS Control systems with GWS component deployed from year 2020 onwards are likely affected by the above vulnerabilities. Product deployments without GWS component are not affected. • SVC Light (STATCOM) • Fixed Series Capacitor • Thyristor Controlled Series Capacitor • Static Var Compensator • Static Watt Compensator •CISA
CYBERSep 17Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A)View CSAF Summary Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication data in the affected product by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly. The following versions of Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A) are affected: Mitsubishi Electric MELSEC MX Controller MX-R model MXR3CISA
CYBERSep 17Schneider Electric Modicon M340 Controller and Communication ModulesView CSAF Summary Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-environments/: Modicon M340 X80 Ethernet Communication Modules, BMXNGD0100 https://www.se.com/us/en/product/BMXNGD0100/communication-module-modicon-m580-global-data-service/: M580 Global Data module, BMXNOC0401 https://www.se.com/us/en/product/BMXNOC0401/network-module-modicon-m340-ethernet-ip-and-modbus-tcp-4-x-rj45/?pageTypCISA
CYBERSep 17Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This WebinarA new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be exploited in your environment? Mythos-class AI is compressing the time between disclosure and working exploitation, while many security programs still validate risk on weekly or quarterly cycles. The dangerous gap is no longer just technical. It isThe Hacker News
CYBERSep 17CISO's Expert Guide to Agentic Pentesting for WebsitesAttackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR 2026). A new free guide explains how autonomous AI agents are closing that gap, and what security leaders must demand before pointing one at production. TL;DR Exploitation is now the front door. It starts 31% of breaches (Verizon DBIRThe Hacker News
CYBERSep 17AI's imminent hacking threat is hiding in plain sightAxios
CYBERSep 17How a swarm of AI agents could hijack the internet: “It would take a few years to fix everything”El País
CYBERSep 16Video shows Coast Guard, FBI boarding oil vessel suspected of being hacked by IranCBS News
CYBERSep 16AI Security Spending Jumps as Fear Outpaces Proof of ValueCISOs are not waiting for AI to prove its cybersecurity value before investing in the technology. Is it the right move?Dark Reading
CYBERSep 16The 'burnerverse' exploiting young women in collegeNPR News
← NewerOlder →