GLOBEALERT

Feed

Open sources, classified and cross-checked. 1,225+ stories.

CYBERSep 15CrowdStrike CEO Kurtz: ‘The genie’s out of the bottle’ on AI threatsThe CEO of CrowdStrike states that artificial intelligence threats are now an unavoidable reality. This indicates growing concerns within the cybersecurity industry about the widespread and evolving dangers posed by AI.Seeking Alpha Tech
CYBERSep 14'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops BlinkDark Reading
CYBERSep 14Russian Telegram channels are suddenly gaining thousands of suspicious new followers. Nobody knows who’s behind the apparent bot attack.Several independent Russian news outlets, including Meduza, have seen a sharp rise in subscribers to their Telegram channels in what appears to be a bot attack.Meduza [en]
CYBERSep 14Maximum Severity GitLab Flaw Puts Supply Chains at RiskDark Reading
CYBERSep 143BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber CredentialsAn attacker was operating inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCentral, threat intelligence firm Hunt.io said. The company uncovered the intrusion by examining a server the attacker had left open on the internet, which held the attacker's own tools and a list ofThe Hacker News
CYBERSep 14Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML ExportsA flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file toThe Hacker News
CYBERSep 14Tamil Nadu CB-CID nabs Rajasthan scammer who circulated  Al-generated deep fake video impersonating CM VijayThe accused and his associates used AI-generated deep fake videos asking the general public to contact a WhatsApp number for any financial help, police saidThe Hindu
CYBERSep 14New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential ComputingThe Hacker News
CYBERSep 14Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six CountriesThe Hacker News
CYBERSep 14WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before DistributionWordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. "New plugins are reviewed before they enter the directory, but updates ship continuously after that," David Perez, WordPress Official PluginThe Hacker News
CYBERSep 14The New Moscow: A Digital Utopia Doubling as a Surveillance TrapCutting-edge technologies have reshaped the Russian capital, making it safer, more convenient — and more closely watched.NYT World
CYBERSep 14⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsAI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great combination. The rest of the week is more familiar: old bugs still working, fresh exploit chains, exposed systems, weak defaults, and simple paths that should have been harder to abuse. A few ofThe Hacker News
CYBERSep 14Spike in Online Attacks Silences Somali Journalists Amid Somalia’s China-Turkey PartnershipMOGADISHU, Somalia 14 September 2026 – Somali journalists and independent media outlets were hit over the weekend by a cluster of online disruptions that press freedom monitors say bear the hallmarks of a coordinated campaign to choke off critical reporting. The attacks documented by SJS included Facebook account suspensions, page removals and the malicious memorialization [...]axadletimes · somalia
CYBERSep 14Tech expert warns of secondary scams following $25m iPhone fraud waveA massive wave of suspected credit card fraud targeting Apple’s latest smartphone pre-orders has hit Hong Kong, prompting the Cyber Security and Technology Crime Bureau to launch a full-scale investigation into transactions totaling approximately HK$25 million.thestandard_hk · hong kong
CYBERBREAKINGSep 14US Pentagon triggers alarm for 150M+ American drivers after massive ID breach — is your identity exposed? Do this nowYahoo Finance
CYBERSep 14CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires CISA
CYBERSep 14AI Changed the Exposure Problem. Validation Needs to Change With It.There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a much greater scale, while defenders still have to work out which findings actually deserve their action. In the first half of 2026, a whopping 35,853 CVEs were published, roughly 49% more than in theThe Hacker News
CYBERSep 14Microsoft’s PatchingOnce a month, Microsoft pushes a security update to all Windows users. Tomorrow’s is a new record: Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold. It was only two months ago that Microsoft patched a then-record 570 vulnerabilities. Then, last month, Microsoft patched some 620 of them. Google and other companies have also published record numbers of vulnerabilities in recent months. Two weeks ago, OpenAI, Anthropic, Amazon Web Services, Google, Microsoft, and 100 compaSchneier
CYBERSep 14Kochi Metro documents leak: Police launch probeAccording to police, the incident came to light after KMRL found that some of its confidential documents were being circulated in WhatsApp groupsThe Hindu
CYBERSep 14Hong Kong’s iPhone scam: how to protect your credit card from online fraudMore than 700 Hongkongers were shocked to discover that their credit cards had been used to place unauthorised orders for Apple’s new iPhone 18 Pro series handsets over the weekend. Although banks reassured victims they would not be charged as long as the cards were used with due care and the transactions were proven to be unauthorised, the incident still caused widespread concern over credit card security. The South China Morning Post asked information technology experts for practical tips on...South China Morning Post
CYBERSep 14How an AI plot targeted Malaysia’s elections and exposed deep data risksSouth China Morning Post
CYBERSep 14Meta restricts access to viral AI video of Keralam CM dancing over power cuts‘We have restricted access to your content in India pursuant to notice from the Government of India’, a message from Meta shared by the creators saidThe Hindu
CYBERSep 14Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 UsersThe Hacker News
CYBERSep 14China’s spy agency warns of AI risk to national securityBeijing signals growing concern over how rapid advances in technology could be used against the countryFinancial Times