GLOBEALERT
Sign in

Feed

Open sources, classified and cross-checked. 505+ stories.

AllConflictMilitaryPoliticsBusinessSci & TechCyberDisasterHealthWorld
24h3 days7 days30 daysAll·All regionsNorth AmericaSouth AmericaWestern EuropeEastern EuropeBalticsMiddle EastNorth AfricaSub-Saharan AfricaSouth AsiaEast AsiaOceania
CYBEROct 2Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage CampaignThe Hacker News
CYBEROct 2Some topics are off limits in Chinese AI, researchers findA popular Chinese AI program, Qwen, has no memory of Tiananmen Square and no tolerance for Winnie the Pooh.CBS News
CYBEROct 2Authenticator apps explained: a step-by-step guide to adding two-factor protection to your accountsIf your password is exposed in a data breach or handed over through a phishing scam, it can't keep your accounts safe by itself. A two-factor authentication (2FA) app closes that gap. It adds a second check: you enter a short code generated on a device you control, which means an intruder who has only your password still can't log in.Below, we cover how authenticator apps work, what to look for when choosing one, how to connect it to your accounts, and what to do if the codes stop working or you switch phones.Why a password alone isn't enoughA password is the first line of defense for many online accounts, and sometimes it's the only one. Reusing passwords and falling for phishing both raise the chance that a stolen password will be used to reach your personal data.An authenticator app requires a second code that it creates independently on your mobile device. Even with your password, no one can sign in without that app or device.Start by enabling it on the accounts that matter most, such as email, cloud storage and online banking. Attackers often go after these because breaking into them can expose your identity or your money.Why an authenticator app is safer than SMS codesThe two options you'll see most often when enabling 2FA are SMS codes and an authenticator app. Each one adds protection, but not the same amount.Text-message codes can be intercepted, and the account they're sent to can be hijacked. An authenticator app generates its codes on your device, so they never pass over the cellular network where someone could intercept them.The codes are time-based one-time passwords (TOTP). Each one can be used only once and typically refreshes every 30 seconds.Understand the terms in your security settingsYou may run into several different labels in your account's security settings:Two-factor authentication (2FA): an extra step after your password that confirms it's really you.Multifactor authentication (MFA): frequently used as another name for 2FA, though it can also cover methods like biometrics or hardware tokens.Authenticator app: the phone app that produces the time-based codes.Backup codes: single-use codes issued when you set up 2FA, used to regain access if you lose your device.Choose an authenticator app for Android or iOSChoose an app that suits the way you use your devices day to day. These features are worth looking for:Easy setupOrganized account management, so a long list of entries stays easy to searchEasy recovery optionsCloud backup, so your codes can be restored if your phone is lost (some apps keep codes only on the phone itself)Multi-device support, if you rely on more than one deviceOffline access, so codes are available without an internet connectionSet up 2FA with an authenticator appEach service words things a little differently, but the steps generally look like this:Log in to the account you want to secure and open its settings.Find the security or authentication section.Select the option to turn on two-factor authentication.Open your authenticator app and scan the QR code displayed on screen. If scanning doesn't work, enter the manual code provided by the service instead.Type in the time-based code now showing in the app to complete the link between the app and your account.Label the entry clearly in the app so you know which code belongs to which account.Store the backup codes the service provides in a safe place.Keep your backup codes safeRegaining access to accounts secured by an authenticator app can be difficult if your phone is lost or reset. Backup codes are how you get back in.Every backup code is single-use. Keep them somewhere secure that you can still get to, so you aren't permanently locked out of your accounts.Move your codes when you change phonesBefore wiping or handing off your old phone, follow these steps:Transfer your accounts to the new phone using the authenticator app's export or migration tool, or set up 2FA again for each account on the new device.Confirm that the new phone produces working codes.Only then erase the old phone.If you've already changed phones without transferring your codes, use your backup codes or reach out to the service's support team to recover access to your accounts.Fix authenticator codes that don't workWhen a service keeps rejecting the codes from your app, your device's clock may have drifted out of sync. Enabling automatic time synchronization on your phone usually solves the problem.With several logins at the same provider, it's easy to enter the code meant for a different one. Give every entry in the app a distinct name so you always choose the correct code.What to do if a service only offers SMS or email codesSome services don't work with authenticator apps and provide 2FA only through SMS or email. In those cases, rely on a strong, unique password and enable the service's other account recovery features.Should the service add authenticator app support down the line, move over to it for stronger protection.Check your 2FA setup regularlyFrom time to time, confirm that 2FA is still active on your key accounts, that your backup codes are stored somewhere accessible, and that switching to a new device hasn't disrupted your setup. Staying on top of this lowers your exposure to phishing attacks and to credential stuffing (where attackers try leaked usernames and passwords on other sites).Frequently asked questionsIs an authenticator app safer than SMS codes?In general, yes. SMS codes can be intercepted, or the account receiving them can be hijacked, whereas authenticator app codes are generated on your device and never travel over the cellular network.What's the difference between 2FA and MFA?People often use the two terms interchangeably. MFA can also cover other methods, such as biometrics or hardware tokens.What happens if I lose my phone with my authenticator app on it?Get back into your accounts with the backup codes you saved when setting up 2FA. If you don't have them, the service's support team may be able to assist.Why does my authenticator app show the wrong code?Most likely your phone's clock is out of sync. Enabling automatic time synchronization usually resolves it.egamers · united arab emirates
CYBEROct 2Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes NodesThe Hacker News
CYBEROct 2Nucleon Security, the gem that challenges global cybersecurity giantsL’éditeur de solutions de cybersécurité veut intensifier son développement sur les marchés d’Afrique subsaharienne, certain de pouvoir se différencier des géants du secteur grâce à sa technologie et son adaptation au terrain.Jeune Afrique
CYBEROct 2Kiteworks & Citrix Incidents Show Challenges of Zero-Day ResponseOne company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported attacks prior to releasing a patch for its product.Dark Reading
CYBEROct 2New Platform Adds Independent Security Layers for AI Agents“Nvidia CEO Jensen Huang on Monday introduced a toolkit of software and hardware products that add independent security layers around AI agents to ensure they stay within their test environments even if they attempt to break out… The new Nvidia Open Agent Safety Platform combines OpenShell, its open source software for controlling what agents can […] The post New Platform Adds Independent Security Layers for AI Agents appeared first on Human Progress.Human Progress
CYBEROct 2SWIFT Banking & Government Middleware Enables RCEDark Reading
CYBEROct 2Surveillance alert helps foil alleged arson attemptA surveillance alert played a crucial role in preventing an alleged attempt at arson. This demonstrates how monitoring technology can be instrumental in thwarting criminal activities.winnipegsun · canada
CYBEROct 2Iran accused of blocking SIM cards, digital access to silence dissentDW News [en]
CYBEROct 2Moroccan intelligence accused of spying on journalists and human rights activistsRFI [en]
CYBEROct 2Unidentified Flock Cameras in FloridaSt. Lucie County in Florida discovered (alt link) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted. I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown. My guess is that in the StingRay case, the devices were operated by foreign actors. This Flock case is more likely some local government entity that didn’t bother getting approval. Were I a foreign actor, I would rather hack the existing Flock network—like Israel ...Schneier
CYBEROct 2Alleged Cybercrime: Prosecution Faults Sowore’s Demand For DSS Chief To TestifySowore is standing trial on allegations of cyberbullying arising from posts he published on X (formerly Twitter) and Facebook in August 2025, in which he described President Bola Tinubu as a “criminal” and accused him of misrepresenting the level of corruption in the country. The post Alleged Cybercrime: Prosecution Faults Sowore’s Demand For DSS Chief To Testify appeared first on Channels Television.Channels TV
CYBEROct 2Vulnerability Backlogs Are an Ownership ProblemOrganizations don't need better vulnerability scanners; they need to know who owns their assets and has the authority and capacity to actually fix them.Dark Reading
CYBERBREAKINGOct 2Trump consulted Musk’s chatbot Grok before abducting Venezuela’s president: reportThe Independent World
CYBEROct 2Malicious Linux Implants Mimic Asian Mail Security ProductsA trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not.Dark Reading
CYBEROct 2Man charged with cyberstalking Katie MillerA Massachusetts man was arrested Thursday and charged with cyberstalking conservative podcaster Katie Miller, the wife of White House deputy chief of staff Stephen Miller, after prosecutors alleged that he repeatedly called and texted her for weeks. John Anthony Proia III, 41, was indicted on one count of cyberstalking over what prosecutors described as a…The Hill
CYBEROct 2US accuses businessman of smuggling AI technology to ChinaUn empresario californiano fue arrestado por contrabandear más de 300 millones en tecnología de IA a China, usando documentos falsos y rutas indirectas.La empresa del acusado enviaba servidores a países sin restricciones y luego los redirigía a China, violando controles de exportación de EE. UU.Clarín
CYBEROct 2US arrests man over alleged smuggling of US$300 million worth of computer servers to ChinaGreg Lui operated a technology company called Earthmade Computer, which he used to buy and send items to China without the licences required by the US Department of Commerce from 2023 to 2024, said the Department of Justice.channelnewsasia · indonesia
CYBEROct 2China stockpiles ASML lithography tools, spurring US calls for complete export banChinese semiconductor plants amassed hundreds of immersion lithography machines worth billions of dollars in recent years, according to former US officials, who urged Washington and its allies to shut down further exports. Chinese-owned fabs had acquired an estimated 343 immersion deep ultraviolet (DUV) lithography systems by early 2026, said a report published in late September by the Centre for Technology & Statecraft (CTS), a Washington research group established in August. Co-authored by...South China Morning Post
CYBEROct 2CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive BranchCISA
CYBEROct 2Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the ReportThe quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, the SIEM and the EDR console. Someone is building a spreadsheet to reconcile them. Someone else is turning that spreadsheet into slides. Then a board member asks three questions: How secure is the organization, overall? What isThe Hacker News
CYBEROct 2The Flock Debate Comes to PennsylvaniaWriting my testimony made me firmer in my belief that indiscriminately using these systems searches for all cars, and by close inference all drivers, all the time. The post The Flock Debate Comes to Pennsylvania appeared first on American Enterprise Institute - AEI.AEI
CYBEROct 2Police arrest man for alleged online fraud, recover 25 phones, many ATM, SIM cardsThe online fraud case highlights the risks posed by online advertisements that are used to reach potential victims with seemingly legitimate offers. The post Police arrest man for alleged online fraud, recover 25 phones, many ATM, SIM cards appeared first on Premium Times Nigeria.Premium Times
← NewerOlder →