GLOBEALERT

Feed

Open sources, classified and cross-checked. 793+ stories.

CYBERSep 25A US jury declares Meta responsible in Cambridge Analytica caseA jury in the US found a social network guilty of misleading users about their privacy, linked to the case of a political consultancy. The affected state is seeking millionaire sanctions for massive violations of consumer protection laws.Clarín
CYBERSep 25AI Sandbox Escapes: Why Forensic Readiness Matters More Than ContainmentWhen autonomous AI agents "escape the sandbox," the real story isn't rogue machines — it's the same access-control failures we've seen for decades.Dark Reading
CYBERSep 25Two held for planting AI generated Maoist threat letters in ToopranTwo individuals were apprehended for allegedly planting AI-generated Maoist threat letters in Toopran. This indicates a concerning use of artificial intelligence for malicious activities and a security incident.The Hindu
CYBERSep 25Zelensky says Russia has widened attacks to hit Ukraine's data centresBBC World
CYBERSep 25What We Missed: Google Gemini Joins the AI Escape PartyIn this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from Google Gemini models breaking containment to ShinyHunters ratting on TeamPCP hackers.Dark Reading
CYBERSep 25US court upholds Pentagon’s blacklisting of AnthropicConflict began in February when Anthropic refused to remove restrictions on use of Claude for fully autonomous weapons.Al Jazeera [en]
CYBERSep 25Lithuania's Interior Ministry reports cyberattack on its information systemLithuanian Interior Minister Martynas Katelinas was informed of a cyberattack on an information system administered by the Information Technology and Communications Department (IRD) under Lithuania's Interior Ministry.Ukrinform [en]
CYBERSep 25A criminal group hacks Adif and Renfe websites with AI and steals 500 Gigabytes of dataEl ciberataque se ha producido durante varios días, aunque el peor momento se produjo el jueves. "Sólo han accedido a información limitada y no a información sensible", dice Renfe. La página web de Adif no está disponible. LeerEl Mundo
CYBERSep 25Flock surveillance cameras raise constitutional questions, bipartisan US senators sayA vast and growing network of artificial intelligence-driven Flock cameras could violate constitutional privacy rights, U.S. senators on a Judiciary Committee subcommittee said during a Wednesday hearing.montrosepress · united states of america
CYBERSep 25Beware of billionaires gifting Trojan Horses to steal your election dataEarlier this month, Americans got a look inside Elon Musk’s own Trojan Horse.The Hill
CYBERSep 25Stopping IT Worker Scams Requires Revamped HR ProcessTraining human-resource managers in the latest tactics and warning signs goes a long way toward blunting the threat, but automated analysis can help even more.Dark Reading
CYBERSep 25Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud MalwareThe Hacker News
CYBERSep 25Special agents' blood and urine test results stolen in FBI hackBBC World
CYBERSep 25PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer PersistenceCybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaScript for Automation (JXA) dropper mechanism, but modify the lure and the delivery method. "Where earlier variants embedded their payload key materialThe Hacker News
CYBERSep 25Russia’s mobile operators warn they’ll block bank calls starting October 15 if they aren’t labeledRussia’s Digital Development Ministry has asked the central bank to make sure banks are complying with a requirement to label mass calls, the Russian business daily Kommersant reported. Digital Development Minister Maksut Shadayev sent the request in a letter to Elvira Nabiullina, the head of Russia’s central bank.Meduza [en]
CYBERSep 25Brussels, ready to defend fine against X in court after US support for MuskLa Comisión Europea defiende ante la Justicia la multa de 120 millones de euros a una red social por violar normas digitales. EE.UU. apoya a la plataforma.Las sanciones se basan en prácticas engañosas y falta de transparencia. Washington cuestiona la jurisdicción europea sobre empresas americanas.Clarín
CYBERSep 25CBI arrests key accused in cyber fraud case targeting U.S. nationalsThe Central Bureau of Investigation says the syndicate ran illegal call centres from Gujarat’s Ahmedabad since 2024, defrauding victims of over $7.21 million by posing as U.S. federal agency officersThe Hindu
CYBERSep 25CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requireCISA
CYBERSep 25CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian ExecCISA
CYBERSep 25Delhi HC directs Meta to immediately remove objectionable morphed photo of woman with PMJustice Girish Kathpalia observed that this is an extraordinary position in which the matter is not of one woman but also of the country’s Prime MinisterThe Hindu
CYBERSep 25The SOC Doesn't Need to Start Over with Every AlertSecurity leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on a low-privilege cloud account, and the first try at privilege escalation goes nowhere. That dead end used to cost hours of documentation reading,The Hacker News
CYBERSep 25On Anthropic’s AI Misuse ReportEarlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized the report into 117 findings. A few of the highlights: AI agents increasingly handled reconnaissance, exploitation, data theft, propaganda production, surveillance workflows, and research while humans selected targets, set goals, and reviewed important outputs. The report describes attackers using AI to industrialize credential theft, cloud compromise, phishing, vulnerability research, and the extraction of sensitive data from downstream organizations. ...Schneier
CYBERBREAKINGSep 25Russia targets Ukraine’s data centresFinancial Times
CYBERSep 25OpenAI Agents Hacked Into an Australian Government Website. Who’s Responsible?NYT World