GLOBEALERT

Feed

Open sources, classified and cross-checked. 25+ stories.

CYBERnow[Virtual Event] Cybersecurity Outlook 2027This article announces a virtual event focused on the cybersecurity outlook for 2027. It is important for understanding future trends and challenges in cyber defense.Dark Reading
CYBERnow[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AIThis article discusses a virtual event focused on the importance for enterprises to secure cloud assets, particularly in the context of artificial intelligence. It highlights crucial cybersecurity considerations in modern IT environments.Dark Reading
CYBER2h agoWhy AI makes it harder to stop computer 'worms'Expertos advierten que la inteligencia artificial potencia la propagación de gusanos informáticos, dificultando su detención por su capacidad adaptativa.Se sugiere desconectar modelos de IA de internet y estandarizar prácticas para mitigar riesgos en dispositivos con ciberseguridad deficiente.Clarín
CYBER2h agoMicrosoft Patches More Than 1,400 Security FlawsMicrosoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.Krebs Security
CYBER3h agoZero-Days Lurk in Microsoft's Overgrown October Patch TuesdayDark Reading
CYBER3h agoAI "worms" could infest your home devices within months, Anthropic warnsAnthropic is warning that your home devices could soon be infested by what they're calling artificial intelligence worms. Jordan Rae Kelly, senior managing director and head of cybersecurity at FTI Consulting, joins "The Takeout" to discuss.CBS News
CYBER4h agoOpen AI says employee caught planting listening deviceA Saudi national employed by the artificial intelligence lab has been arrested after a listening device was planted in a company conference room.DW News [en]
CYBER4h agoAn OpenAI engineer was arrested for installing a device to spy on meetings: they discovered it with artificial intelligenceThe FBI arrested an employee of the company that created ChatGPT, accused of hiding a recording device in an executive meeting room. OpenAI stated that it used its own artificial intelligence models to investigate the device and identify the suspect. The company firedClarín
CYBER4h agoSaudi national OpenAI employee arrested after 'sophisticated recording device' planted in officeThe Tuesday incident comes as the ChatGPT-maker, along with competitors, faces heightened scrutiny over its safety practices.CNBC
CYBER5h agoAnthropic Finds Ingredients for Future AI WormsAnthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.Dark Reading
CYBER6h agoF.B.I. Disrupts Pyongyang Revenue Stream: North Koreans in U.S. Tech JobsNYT US
CYBER7h agoJPMorgan Chase blocks outside AI agents like Muse, Instinct from directly accessing accountsJPMorgan Chase CEO Jamie Dimon warned of rogue agents operating at scale and said the bank is building defensive tools.CNBC
CYBER7h agoAnthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsThe Hacker News
CYBER7h agoDocker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as AnotherA flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal account into an organization, Docker said in a security advisory on October 12.The Hacker News
CYBERBREAKING8h agoAttacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So FarThe Hacker News
CYBER8h agoSAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential TheftThe Hacker News
CYBER8h agoCompanies are building with AI — and exposing new security risksThe amount of AI-related infrastructure exposed to the public internet jumped 63% in nine months, according to new Censys data shared first with Axios.Why it matters: The AI boom isn't just creating new models and chatbots. It's creating a sprawling layer of software that companies will also need to inventory, patch and secure.Threat level: Many of these tools connect AI applications to sensitive corporate data and other services, creating potential entry points for hackers looking to access company systems."It's a little bit beyond just like the tool itself, but these [tools] talk to some reaAxios
CYBER8h agoHow to detect a fake QR code: warning signs to avoid scams and protect your bank accountScanning a fake QR code is usually not enough; most actions require an additional step. 'Quishing' involves combining a manipulated QR with a fake page to steal your data.Clarín
CYBER9h agoGitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to HijackingThe Hacker News
CYBER11h agoRomance scammers are getting harder to catch. The consequences are costly.For people looking for love online, a match with a scammer could cost them their life savings.NBC News
CYBER13h ago[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity ControlsThe dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate. A compromised account that looks legitimate at first could become the starting point for a muchThe Hacker News
CYBER14h agoLG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local NetworkThree vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmwareThe Hacker News
CYBER15h agoAnthropic warns rogue AI agents may ‘self-replicate’ to hijack everyday devicesFinancial Times
CYBER17h agoTwo Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin ControlThe Hacker News