GLOBEALERT

Feed

Open sources, classified and cross-checked. 97+ stories.

CYBER4d agoThree Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2OwnThe Hacker News
CYBER4d agoCitrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML DeploymentsThe Hacker News
CYBER4d agoOpenAI parts ways with three researchers after probe finds sensitive information breachOpenAI has dismissed three researchers following an investigation that uncovered a sensitive information breach. This event is significant as it highlights internal security challenges and potential risks within leading artificial intelligence organizations.Seeking Alpha Tech
CYBER4d agoFBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure IntrusionsThe U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon. To that end, the agencies seized several domains and blocked access to platforms that were used to scan, and in some cases infiltrate, U.S. critical infrastructure. The list of seizedThe Hacker News
CYBER5d agoHow to Change Your Location on Life360 Without “Location Paused” AlertsSharing your location can be useful for keeping family and friends connected, but there are times when having more control over your digital whereabouts matters just as much. Whether you're looking for greater privacy or simply want to manage the location information your device shares, GPS-changing...gizchinacom · china
CYBER5d agoOpenAI caught Russians and Iranians using ChatGPT for influence campaignsNPR News
CYBER5d agoOpenAI bans Russian, Iranian ChatGPT propaganda networksFrance 24 [en]
CYBER5d agoOpenAI users in Russia, Iran used models to push political agenda online, in mediaOpenAI banned several accounts associated with two propaganda operations based in Iran and Russia, respectively, it confirmed Thursday — the latter of which the tech company said had the greatest reach it has recorded since it began reporting on and disrupting such schemes. The influence operations used OpenAI models alongside “more traditional techniques and technologies…The Hill
CYBER5d ago'AgentCorruption' Puts AWS Environments At Risk With Single PromptA now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.Dark Reading
CYBER5d agoExclusive: Anthropic's plan to protect critical infrastructureAnthropic is launching a new cybersecurity initiative designed to bring its most powerful AI models and engineers to companies protecting power grids, water utilities and other critical infrastructure, the company first shared with Axios.Why it matters: Critical infrastructure operators are struggling to secure aging, complex systems as AI threatens to make cyberattacks faster and cheaper to execute.Driving the news: Under its new Critical Infrastructure Defense Program, Anthropic will provide its frontier AI models, on-site engineers and threat research to companies already responsible for seAxios
CYBER5d agoIT Ministry advises social media platforms to take down ‘manipulated’ contentThe advisory expands earlier guidance on rules by the Ministry on AI-generated content; it also advises firms to take on “priority” posts referred by government departmentsThe Hindu
CYBER5d agoThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More StoriesThe crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attacker left a server exposed, complete with tools and traces of an intrusion. Apparently, keeping things secure is a problem on both sides of the fence. The rest of the week isn't much more reassuring. Malicious code turned up in developer packages and extensions thatThe Hacker News
CYBER5d ago[Virtual Event] Building a Secure AI Strategy for the EnterpriseThis virtual event focuses on developing a secure artificial intelligence strategy for enterprises. It addresses the importance of integrating security into AI implementations for businesses.Dark Reading
CYBER5d agoForeign Ministry says cyberattack on website, impact mitigated by security measuresSituation monitored with relevant authorities, analysis of diplomatic mission websites tooANSA [en]
CYBER5d agoFBI arrests 130 over Ghana scam-centre operationWASHINGTON — The Federal Bureau of Investigation (FBI) has announced the arrest and detention of more than 130 people in Ghana in a crackdown on an alleged international scam-centre network targeting American citizens. FBI Director Kash Patel disclosed this on his X platform on Thursday while providing an update on what he described as “Operation […] The post FBI arrests 130 over Ghana scam-centre operation appeared first on Vanguard News.Vanguard Nigeria
CYBER5d agoSatel Netco DesignView CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. The following versions of Satel Netco Design are affected: Satel Netco Design CVSS Vendor Equipment v3 8.8 Satel Satel Netco Design 3 Vulnerabilities Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Inefficient Regular Expression Complexity, Relative Path Traversal Background Critical InfrCISA
CYBER5d agoRed Lion Controls N-Tron 700 SeriesView CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to reboot by navigating to a specific URL on the device. This action can be scripted on the malicious user's local machine to cause continuous rebooting of the switch. The following versions of Red Lion Controls N-Tron 700 Series are affected: 700 Series <=Firmware_3.11.0 (CVE-2026-32645, CVE-2026-39460, CVE-2026-2CISA
CYBER5d agoGrid Protection Alliance openPDC and openHistorianView CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC <2.9.477, <2.9.482 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022) openPDC (Docker image) <2.9.477, <2.9.482 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022, CVE-2026-105278) openHistorian <2.8.580, <2.8.585 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022) CVSS Vendor Equipment v3 9.8 Grid Protection Alliance openPDC 5 Vulnerabilities Deserialization of CISA
CYBER5d agoWazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and AustraliaPhishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, EuropeThe Hacker News
CYBER5d ago16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery PhrasesThe Hacker News
CYBER5d agoFlock is catching flak. Experts say other police surveillance tools are more worrisomeReal-time crime-center software is a sometimes overlooked but powerful tool allowing police to aggregate immense amounts of data, significantly expanding their surveillance reach.NPR News
CYBER5d agoU.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM HacksThe U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his identification or location, the news outlet NTD reported this week, citing a noticeThe Hacker News
CYBER5d agoPM Modi calls for global framework to tackle cyber frauds, deepfakes, digital crimesTechnology can achieve scale only when it gains people's trust, PM Modi saidThe Hindu
CYBER5d agoTensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing WormThe Hacker News