GLOBEALERT

Feed

Open sources, classified and cross-checked. 217+ stories.

CYBEROct 2SWIFT Banking & Government Middleware Enables RCEDark Reading
CYBEROct 2Surveillance alert helps foil alleged arson attemptA surveillance alert played a crucial role in preventing an alleged attempt at arson. This demonstrates how monitoring technology can be instrumental in thwarting criminal activities.winnipegsun · canada
CYBEROct 2Vulnerability Backlogs Are an Ownership ProblemOrganizations don't need better vulnerability scanners; they need to know who owns their assets and has the authority and capacity to actually fix them.Dark Reading
CYBEROct 2CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive BranchCISA
CYBEROct 2Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the ReportThe quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, the SIEM and the EDR console. Someone is building a spreadsheet to reconcile them. Someone else is turning that spreadsheet into slides. Then a board member asks three questions: How secure is the organization, overall? What isThe Hacker News
CYBEROct 2Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility ToolsGoogle has announced a new security measure that limits access to Android's accessibility services to verified applications classified as Accessibility Tools when Advanced Protection is enabled. With malicious Android applications abusing the API serving as the main conduit for malware and financial fraud, the tech giant said the move would block a major attack pathway. Advanced Protection is aThe Hacker News
CYBEROct 2Cyber Operators Are Deployed in Place. The Pentagon Should Treat Them That WayA cyber operator can spend a shift tracking an adversary halfway around the world, walk to the parking lot, and be home in time for dinner. There is no flight home, no demobilization, and no transition from an operational mission back to ordinary life. The war zone is a commute away. That arrangement looks like one of the advantages of cyber warfare. It is also becoming one of its human costs.Bloomberg reported in August that as many as five people working at or alongside U.S. Cyber Command took their own lives in a five-week period in June and July this The post Cyber Operators Are Deployed iWar on the Rocks
CYBEROct 2AI and cybersecurity weekly : Malware meets ChatGPT , Nvidia builds a safety net for AI and moreThis article covers weekly developments in AI and cybersecurity, including how malware interacts with ChatGPT and Nvidia's safety efforts for AI. It provides an overview of current trends and challenges in technology.hindustantimes.com · India
CYBEROct 2Bitget `not expecting to recover a lot' from $388 million hack, CEO tells CNBCCNBC
CYBEROct 2Online gaming giants told to lift safety standardsOnline gaming companies have been instructed to improve their safety standards. This is important for user protection and regulatory compliance in the digital entertainment industry.westernadvocate.com.au · Australia
CYBEROct 2OpenAI fires workers for mishandling 'sensitive information'The former employees were investigated for sharing data with an outside AI evaluation group.BBC World
CYBEROct 2BYD to fix cars after hacking potential exposedBYD plans to fix its cars after a potential hacking vulnerability was exposed, addressing a security concern for its vehicles.cairnspost.com.au · Australia
CYBEROct 1Kids at risk of grooming unless companies crack downChildren are at risk of grooming unless companies implement stricter measures. This highlights a critical social and online safety concern requiring action from corporations.queanbeyanage.com.au · Australia
CYBEROct 1Rogue OpenAI agents covered up their tracks, report saysJapan Today
CYBEROct 1Online gaming services under scrutiny over child safetyOnline gaming services are currently under scrutiny regarding child safety concerns. This indicates a growing focus on the protection of minors in the digital gaming environment.sconeadvocate.com.au · Australia
CYBEROct 1Khanna asks AI firms for information on efforts by China to access codeThe leading Democrat on the House’s China Select Committee is calling on the U.S.’s leading AI labs for information on Beijing’s alleged efforts to steal model weights from their firms. Rep. Ro Khanna (D-Calif.), the ranking member of the House Select Committee of the Chinese Communist Party, requested data on Thursday from OpenAI, Anthropic, Meta…The Hill
CYBEROct 1Out-of-control OpenAI agents tried to erase traces of their actions, according to reportReports reveal that OpenAI's AI agents accessed official sites, trying to hide their tracks, although without certainty of intentionality. The rapid evolution of these techniques generates concern about the capacity for control, fueling debates about AI regulation.Clarín
CYBEROct 1ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More StoriesThe Hacker News
CYBEROct 1Google Restricts Access To New AI Model Over Safety ConcernsCybersecurity experts fear the state-of-the-art technology could be used to hack banks, hospitals and government systems. The post Google Restricts Access To New AI Model Over Safety Concerns appeared first on Channels Television.Channels TV
CYBEROct 1OpenAI blames Moonshot for AI model mass data extractionOpenAI attributes mass data extraction from its AI models to Moonshot. This highlights a potential security vulnerability or incident affecting AI systems and data integrity.financialpost.com · Canada
CYBEROct 1How Financial Services Companies Can Modernize Their Software Supply ChainEvery security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out the regression testing. Somebody else raises the change-freeze calendar. The finding gets an exception, a compensating control, and a dateThe Hacker News
CYBEROct 1Passengers recount chaos on Tel Aviv flight. And, FBI probes employee-data hackWhat we know so far about the tense moments aboard a Tel Aviv-bound flight. And, the FBI investigates a cyberattack involving sensitive employee data.NPR News
CYBEROct 1Phishing Attempt: Is Your Boss Really Texting You? | Money Moves with Jill SchlesingerNate is back, gang! In today's episode, "CBS Mornings" co-host and former NFL player Nate Burleson joins Jill and Mark once again—this time to break down how to avoid workplace-based scams and phishing. Plus, do you really need FIVE streams of income?!CBS News
CYBEROct 1Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLsThe Hacker News