GLOBEALERT

Feed

Open sources, classified and cross-checked. 217+ stories.

CYBER4d agoZero Trust gets harder when every user, device, weapon, and AI agent needs an identityThe next phase of Zero Trust reaches beyond users and devices, experts discussed during a Breaking Defense webinar.Breaking Defense
CYBER4d agoThree in four EU workers face suspicious emails and links, report findsPhishing remains the most common cyber threat — only one in two respondents say they are able to spot a deepfake video.EuroNews [en]
CYBER4d agoSocial Engineering AI Agents: The New BEC for 2026As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.Dark Reading
CYBERBREAKING4d agoResearchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root AccessThe Hacker News
CYBER4d agoAnthropic Launches Free AI Vulnerability Scanner for Open-Source ProjectsAnthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing," Anthropic said. "Projects that join will receive thorough, periodic security scans by our strongest models at no cost."The Hacker News
CYBER4d agoAttackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft EdgeThreat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4 score: 5.5) - An improper authentication vulnerability in the checkSysPwd() function in the "com/ahsay/obs/api/ApiStructsAction.java"The Hacker News
CYBER4d agoPreventing The MCP Layer From Becoming A Cyber ThreatEvery new integration expands the enterprise's attack surface, and every MCP server becomes part of the organization's software supply chain.headtopics · united states of america
CYBERBREAKING4d agoFlax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal AgenciesThe Hacker News
CYBER4d agoGhana rejects FBI claim on cybercrime raid leadershipGhana’s Cyber Security Authority (CSA) has rejected suggestions that the United States Federal Bureau of Investigation (FBI) independently led a recent operation against suspected cybercrime centres in the country, insisting that the exercise was planned, coordinated and executed by Ghanaian authorities. The Authority’s response followed a post by FBI Director Kashyap Pramod Patel on X […] The post Ghana rejects FBI claim on cybercrime raid leadership appeared first on Vanguard News.Vanguard Nigeria
CYBER4d agoUkraine strikes Russian tech giant’s data centresFinancial Times
CYBER4d agoIran and Russia used ChatGPT for propaganda by ‘fake journalists’, OpenAI saysThe American tech giant said it banned Russian and Iranian accounts that had been using ChatGPT models to generate content and fake journalist personas to spread false narratives about the conflicts in Ukraine and the Middle East and sow division.EuroNews [en]
CYBER4d agoThe AI Velocity Paradox: Why Security Is Decades Behind AI AmbitionAs enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls, creating aThe Hacker News
CYBER4d agoScoop: AI companies plot "day after" scenarios for public revoltAxios
CYBER4d agoGoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format KeysThe Hacker News
CYBER4d agoIranian campaign planted fake articles in real U.S. publications using ChatGPTChatGPT users in Iran made more than 100 fake articles published across at least 20 news outlets, OpenAI said.Washington Post World
CYBER5d agoThree Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2OwnThe Hacker News
CYBER5d agoCitrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML DeploymentsThe Hacker News
CYBER5d agoWhy has Iraq decided to ban online map service Waze?Iraq plans to ban Waze, citing Israeli origins, and suggests alternatives like Google Maps or local app in development.Al Jazeera [en]
CYBER5d agoOpenAI parts ways with three researchers after probe finds sensitive information breachOpenAI has dismissed three researchers following an investigation that uncovered a sensitive information breach. This event is significant as it highlights internal security challenges and potential risks within leading artificial intelligence organizations.Seeking Alpha Tech
CYBER5d agoFBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure IntrusionsThe U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon. To that end, the agencies seized several domains and blocked access to platforms that were used to scan, and in some cases infiltrate, U.S. critical infrastructure. The list of seizedThe Hacker News
CYBER5d agoBIR warns taxpayers against fake ORUS websiteThe BIR warned taxpayers against orus.ph, a suspicious website imitating its online registration system, and urged users to access ORUS only through its official portal.tribune · philippines
CYBER5d agoPhilippines thought Pogos were gone. Corruption and AI still power themTwo years after the Philippines banned its notorious offshore gaming hubs, or Pogos, a recent crackdown on hundreds of foreigners has highlighted a worrying trend of embedded corruption that still enables the sector to thrive. In September, the National Bureau of Investigation raided a call centre-style facility in Makati City, arresting more than 120 Chinese nationals linked to an alleged illegal trading and a “lust scam” that tricked local and foreign victims into sharing explicit videos,...South China Morning Post
CYBER5d agoAI ‘deepfakes’ give US political attack ads a new twistFinancial Times
CYBER5d agoHow to Change Your Location on Life360 Without “Location Paused” AlertsSharing your location can be useful for keeping family and friends connected, but there are times when having more control over your digital whereabouts matters just as much. Whether you're looking for greater privacy or simply want to manage the location information your device shares, GPS-changing...gizchinacom · china