GLOBEALERT

Feed

Open sources, classified and cross-checked. 505+ stories.

CYBERSep 16The 'burnerverse' exploiting young women in collegeNPR News
CYBERSep 16Andrés Blanco, Argentine hacking reference and Wi-Fi network security specialist, diedTenía 44 años, trabajó en Core Security y presentó sus investigaciones en conferencias internacionales como DEF CON y Black Hat.Descubrió fallas en chips utilizados en celulares y tablets de Apple, Samsung y otros fabricantes.Colegas, amigos y alumnos recuerdan su generosidad para enseñar y su participación en Ekoparty.Clarín
CYBERSep 16Hackers rip down Flock camera, steal its data, share findings with mediaA group of hackers ripped down a Flock camera and stole its data, finding that the cameras’ software can generate dozens of images from a single passing vehicle to develop its signature. The group, called stegan0gram, shared findings with Wired and 404 Media, who ran a joint investigation. The outlets found that in a 21-day…The Hill
CYBERSep 16BragJack Attack Can Turn a Browser's Agentic AI Against ItDark Reading
CYBERSep 16He told ChatGPT he wanted to kill his son - then he was arrestedL'affaire soulève des questions sur ce qui devrait se passer lorsque les chatbots identifient une menace potentielle avant qu'un crime ne soit commis.BBC Afrique
CYBERSep 16Hugging Face CEO: Existing cyber laws likely sufficient to govern advanced AI“I think there’s a lot to do around how to create better disclosures,” Clem Delangue said.Politico Tech
CYBERSep 16Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command ExecutionThe Hacker News
CYBERSep 16Russia used Claude AI for espionage, disinformation and drone swarmsEuroNews [en]
CYBERSep 16One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and ClaudeThe Hacker News
CYBERSep 16Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 RepositoriesMandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for theThe Hacker News
CYBERSep 16Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install FixThe Hacker News
CYBERSep 16Fake CAPTCHA ScamsNew variant of an old scam: Use the framing of a CAPTCHA to get an unsuspecting user to download and run a malicious program.Schneier
CYBERSep 16Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted ExploitationGoogle has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error in the code," according to a description of the bug in the NIST National Vulnerability DatabaseThe Hacker News
CYBERSep 16Threat Intelligence Alone Won't Close the Exploitation GapA leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized against a real target before most security teams have triaged the alert. Attackers are combining that kind of intelligence with AI-assisted exploitation to accelerate the path from exposure to breach faster than most security programs are built to react.The Hacker News
CYBERSep 16Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted AttacksThe Hacker News
CYBERSep 16Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web ShellsThe Hacker News
CYBERSep 16Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin TokensThe Hacker News
CYBERSep 15Microsoft Issues Emergency Fixes After Massive Patch TuesdayYou can't make an omelet without breaking a few eggs, and you can't patch nearly 1,000 CVEs without a few glitches.Dark Reading
CYBERSep 15Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face IncidentAt Black Hat USA, OpenAI engineers reconstruct the Hugging Face incident and explore lessons learned about AI safeguards and cyber resilience.Dark Reading
CYBERSep 15KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session TokensThe Hacker News
CYBERSep 15VectraRAT Can Hack Windows Enterprises for $250 per MonthThe full-service malware-as-a-service (MaaS) platform offers a Windows implant, command-and-control (C2) infrastructure, and an operator panel for comprehensive remote access.Dark Reading
CYBERSep 15Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and JournalistsCybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists around the world. The malware is controlled via the Telegram messaging app and can copy a target's emails and chat messages, take screenshots, and activate the microphone to recordThe Hacker News
CYBERSep 15AIVD: Iran hacks online into dissidents to steal sensitive informationNOS Buitenland
CYBERSep 15BambooToken Malware Uses MQTT to Control Windows and Linux SystemsCybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at least February 2023 and put to use in attacks targeting organizations across Asia and South America.The Hacker News