GLOBEALERT

Feed

Open sources, classified and cross-checked. 625+ stories.

CYBERSep 9Police swoop on men accused of grooming children onlinePolice have arrested men accused of grooming children online. This indicates ongoing efforts by law enforcement to combat online child exploitation.gleninnesexaminer.com.au · Australia
CYBERSep 8Microsoft Plugs Nearly 1,000 Security HolesMicrosoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and deploying so many fixes each month.Krebs Security
CYBERSep 8Patch Tuesday Sets Another Record With 974 CVEsDark Reading
CYBERSep 8Attackers Use Multi-Hop Google Redirects for Phishing CampaignThreat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ScreenConnect remote access.Dark Reading
CYBERSep 8US accuses Chinese AI firms of ‘malicious’ copying of AI technology⁠The US government on Tuesday accused Chinese artificial intelligence companies of maliciously copying technology from American AI firms, potentially complicating relations ahead of a planned meeting between leaders of the world’s two biggest economies later this month. The Chinese companies ‌copied US AI labs’ intellectual property through a technique known as distillation, according to a statement from US law enforcement and intelligence officials. Distillation is the process of training...South China Morning Post
CYBERBREAKINGSep 8OpenAI Agents Took Over Wiki Site Before Hugging Face AttackResearchers and OpenAI disagree on whether an earlier incident involving DseWiki, which the company did not disclose, was a “hack."Dark Reading
CYBERSep 8$320 million Bitcoin - linked hack exposes cracks in crypto plumbing – East Bay Timeseastbaytimes.com · United States
CYBERSep 8ClickFix Campaigns Abuse Legitimate Services for Persistent AccessTwo separate attacks demonstrate how threat actors are finding new ways to compromise organizations by using the popular social engineering tactic.Dark Reading
CYBERSep 8Rogue OpenAI agents hijacked a German wiki, and it stayed secret for weeksEuroNews [en]
CYBERSep 8Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTCThe Hacker News
CYBERSep 8Boston Scientific Slammed After Cyberattack Hamstrings Sales, ProfitBoston Scientific faced severe criticism following a cyberattack that negatively impacted its sales and profit. The incident highlights the business consequences of cybersecurity breaches.Yahoo Finance
CYBERSep 8WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming CallsThe Hacker News
CYBERSep 8Boston Scientific says unlikely to meet 2026 sales, profit forecast after cyberattackYahoo Finance
CYBERSep 8FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator CredentialsA flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says. FreeIPA is the system that determines who may log in across a Linux domain and maintains all identities in a 389 Directory Server database accessed via LDAP. The attack needs a second flaw in that database software. TheThe Hacker News
CYBERSep 8Stealing AI Reasoning TracesInteresting research: “Stealing Reasoning Traces from Proprietary LLM APIs“: Abstract: Leading large language model providers now conceal their models’ step-by-step reasoning, or chain-of-thought, to protect intellectual property and limit information leakage. Rather than storing these traces server-side, providers return them to the client as blocks of encrypted text, which the client passes back with each subsequent request. Building on prior research, we identify an architectural vulnerability: these encrypted blocks are fully compatible and interchangeable across differenSchneier
CYBERSep 8Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web ShellThe Hacker News
CYBERSep 8BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support ScamsThe Hacker News
CYBERSep 8Crypto platforms have lost over $3.63 billion to cyberattacks — even though most of them did security checksMore than 60% of cryptocurrency platforms that lost money due to cyberattacks had undergone independent security audits, CoinGecko said.CNBC
CYBERSep 8Cyber premiums are falling as AI attacks accelerate - Moody insurancebusinessmag.com · United States
CYBERSep 8A smartwatch can topple your company security – GadgetThis article warns that smartwatches pose a potential vulnerability that could compromise company security. It highlights the risks associated with these devices in enterprise environments.gadget.co.za · South Africa
CYBERSep 8Weaponizing trust : How AI and social engineering bypass personal security boundariesThis article examines how artificial intelligence and social engineering are being used to circumvent personal security measures by exploiting trust. It highlights evolving threats in cybersecurity.itbrief.co.nz · New Zealand
CYBERBREAKINGSep 7Hackers Drain $320 Million From Bitcoin Liquid Network , Keep $47 Million for Themselves in White Hat Operationgizmodo.com · United States
CYBERSep 7Party over for crypto scammers who went on a spending spree after a $240 million bitcoin theft – Taylorville Daily NewsCrypto scammers who stole $240 million in Bitcoin have been apprehended following a spending spree. This reports on the resolution of a significant cybercrime involving cryptocurrency.taylorvilledailynews.com · United States
CYBERSep 7PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command ExecutionThe Hacker News