GLOBEALERT
Sign in

Feed

Open sources, classified and cross-checked. 529+ stories.

AllConflictMilitaryPoliticsBusinessSci & TechCyberDisasterHealthWorld
24h3 days7 days30 daysAll·All regionsNorth AmericaSouth AmericaWestern EuropeEastern EuropeBalticsMiddle EastNorth AfricaSub-Saharan AfricaSouth AsiaEast AsiaOceania
CYBERSep 15AI scammers are scouring obituaries to target widows — one lost $7,000 after being told her late husband evaded taxesScammers are using AI to target widows through obituaries, with one victim losing a significant amount of money after being deceived about her late husband's tax evasion. This highlights a new and distressing form of AI-enabled financial fraud.Yahoo Finance
CYBERSep 15U.S. seeks to seize $61 million of crypto it claims are proceeds from Iranian petroleum sales to Chinese buyersCNBC
CYBERSep 15LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared ServerThe Hacker News
CYBERBREAKINGSep 15Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command ExecutionThe Hacker News
CYBERSep 15CrowdStrike CEO Kurtz: ‘The genie’s out of the bottle’ on AI threatsThe CEO of CrowdStrike states that artificial intelligence threats are now an unavoidable reality. This indicates growing concerns within the cybersecurity industry about the widespread and evolving dangers posed by AI.Seeking Alpha Tech
CYBERSep 14'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops BlinkDark Reading
CYBERSep 14Maximum Severity GitLab Flaw Puts Supply Chains at RiskDark Reading
CYBERSep 14Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML ExportsA flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file toThe Hacker News
CYBERSep 14New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential ComputingThe Hacker News
CYBERSep 14Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six CountriesThe Hacker News
CYBERSep 14WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before DistributionWordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. "New plugins are reviewed before they enter the directory, but updates ship continuously after that," David Perez, WordPress Official PluginThe Hacker News
CYBERSep 14⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsAI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great combination. The rest of the week is more familiar: old bugs still working, fresh exploit chains, exposed systems, weak defaults, and simple paths that should have been harder to abuse. A few ofThe Hacker News
CYBERSep 14CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires CISA
CYBERSep 14AI Changed the Exposure Problem. Validation Needs to Change With It.There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a much greater scale, while defenders still have to work out which findings actually deserve their action. In the first half of 2026, a whopping 35,853 CVEs were published, roughly 49% more than in theThe Hacker News
CYBERSep 14Microsoft’s PatchingOnce a month, Microsoft pushes a security update to all Windows users. Tomorrow’s is a new record: Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold. It was only two months ago that Microsoft patched a then-record 570 vulnerabilities. Then, last month, Microsoft patched some 620 of them. Google and other companies have also published record numbers of vulnerabilities in recent months. Two weeks ago, OpenAI, Anthropic, Amazon Web Services, Google, Microsoft, and 100 compaSchneier
CYBERSep 14Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 UsersThe Hacker News
CYBERSep 13Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate DataThe Hacker News
CYBERSep 13Anthropic says UAE - linked AI op targeted UN staff over Sudantimesofindia.indiatimes.com · India
CYBERSep 12Series of battery thefts hit RMC CCTV network across cityA series of battery thefts has impacted the RMC CCTV network across a city. This incident suggests a disruption to public surveillance infrastructure.timesofindia.indiatimes.com · India
CYBERSep 12Online Casinos: 5,259 Cases of "Illegal Information" - Most Sites and Advertisements Are OverseasAsahi Shimbun
CYBERSep 12Android NAT - T Keepalive Offload Bypasses VPN Lockdown : Device - Class Exposure Across Most Android 12+ DevicesA security vulnerability affecting Android 12+ devices has been discovered, where an Android NAT-T Keepalive Offload bypasses VPN Lockdown, leading to device-class exposure. This issue poses a significant risk to the privacy and security of users relying on VPNs on these devices.supuk.ch
CYBERSep 12CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEVThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. Details of the vulnerabilities are as follows - CVE-2026-42016 (CVSS score: 8.1) - An incorrect authorizationThe Hacker News
CYBERSep 12OpenAI agents launched cyberattack on RubyGems before Hugging Face hack: reportSeeking Alpha Tech
CYBERSep 12When the Whole Company Adopts AI: What It Does to Your SOCOver the past year, we watched a new class of alert appear in enterprise security operations centers and grow faster than anything else in the stream: alerts that were triggered by AI tools and agents. Not attacks against AI, but the ordinary, everyday footprint of an organization using it, from developers running coding agents and non-technical staff signing consumer AI tools into corporateThe Hacker News
← NewerOlder →