GLOBEALERT

Feed

Open sources, classified and cross-checked. 1,561+ stories.

CYBERSep 143BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber CredentialsAn attacker was operating inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCentral, threat intelligence firm Hunt.io said. The company uncovered the intrusion by examining a server the attacker had left open on the internet, which held the attacker's own tools and a list ofThe Hacker News
CYBERSep 14Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML ExportsA flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file toThe Hacker News
CYBERSep 14Tamil Nadu CB-CID nabs Rajasthan scammer who circulated  Al-generated deep fake video impersonating CM VijayThe accused and his associates used AI-generated deep fake videos asking the general public to contact a WhatsApp number for any financial help, police saidThe Hindu
CYBERSep 14New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential ComputingThe Hacker News
CYBERSep 14Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six CountriesThe Hacker News
CYBERSep 14WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before DistributionWordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. "New plugins are reviewed before they enter the directory, but updates ship continuously after that," David Perez, WordPress Official PluginThe Hacker News
CYBERSep 14The New Moscow: A Digital Utopia Doubling as a Surveillance TrapCutting-edge technologies have reshaped the Russian capital, making it safer, more convenient — and more closely watched.NYT World
CYBERSep 14⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsAI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great combination. The rest of the week is more familiar: old bugs still working, fresh exploit chains, exposed systems, weak defaults, and simple paths that should have been harder to abuse. A few ofThe Hacker News
CYBERSep 14Spike in Online Attacks Silences Somali Journalists Amid Somalia’s China-Turkey PartnershipMOGADISHU, Somalia 14 September 2026 – Somali journalists and independent media outlets were hit over the weekend by a cluster of online disruptions that press freedom monitors say bear the hallmarks of a coordinated campaign to choke off critical reporting. The attacks documented by SJS included Facebook account suspensions, page removals and the malicious memorialization [...]axadletimes · somalia
CYBERSep 14Tech expert warns of secondary scams following $25m iPhone fraud waveA massive wave of suspected credit card fraud targeting Apple’s latest smartphone pre-orders has hit Hong Kong, prompting the Cyber Security and Technology Crime Bureau to launch a full-scale investigation into transactions totaling approximately HK$25 million.thestandard_hk · hong kong
CYBERBREAKINGSep 14US Pentagon triggers alarm for 150M+ American drivers after massive ID breach — is your identity exposed? Do this nowYahoo Finance
CYBERSep 14CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires CISA
CYBERSep 14AI Changed the Exposure Problem. Validation Needs to Change With It.There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a much greater scale, while defenders still have to work out which findings actually deserve their action. In the first half of 2026, a whopping 35,853 CVEs were published, roughly 49% more than in theThe Hacker News
CYBERSep 14Microsoft’s PatchingOnce a month, Microsoft pushes a security update to all Windows users. Tomorrow’s is a new record: Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold. It was only two months ago that Microsoft patched a then-record 570 vulnerabilities. Then, last month, Microsoft patched some 620 of them. Google and other companies have also published record numbers of vulnerabilities in recent months. Two weeks ago, OpenAI, Anthropic, Amazon Web Services, Google, Microsoft, and 100 compaSchneier
CYBERSep 14Kochi Metro documents leak: Police launch probeAccording to police, the incident came to light after KMRL found that some of its confidential documents were being circulated in WhatsApp groupsThe Hindu
CYBERSep 14Hong Kong’s iPhone scam: how to protect your credit card from online fraudMore than 700 Hongkongers were shocked to discover that their credit cards had been used to place unauthorised orders for Apple’s new iPhone 18 Pro series handsets over the weekend. Although banks reassured victims they would not be charged as long as the cards were used with due care and the transactions were proven to be unauthorised, the incident still caused widespread concern over credit card security. The South China Morning Post asked information technology experts for practical tips on...South China Morning Post
CYBERSep 14How an AI plot targeted Malaysia’s elections and exposed deep data risksSouth China Morning Post
CYBERSep 14Meta restricts access to viral AI video of Keralam CM dancing over power cuts‘We have restricted access to your content in India pursuant to notice from the Government of India’, a message from Meta shared by the creators saidThe Hindu
CYBERSep 14Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 UsersThe Hacker News
CYBERSep 14China’s spy agency warns of AI risk to national securityBeijing signals growing concern over how rapid advances in technology could be used against the countryFinancial Times
CYBERSep 14Apple should bear responsibility for Hong Kong iPhone card fraud, lawmaker saysApple is reviewing all current orders for suspicious transactions after more than 700 unauthorised credit card charges were reported in Hong Kong involving orders for its latest iPhone models. “All current orders are being reviewed before they are processed, and we are working to quickly identify and cancel any fraudulent transactions that may have been placed,” an Apple spokesman said on Monday. Over the weekend, many Hong Kong social media users reported unauthorised credit card transactions...South China Morning Post
CYBERSep 14Learning from Ukraine’s unrivaled experience of Russian cyber warfareNo country in the world today knows more about Russian cyber warfare than Ukraine, but further steps are required in order to help Kyiv’s partners make the most of Ukraine’s unrivaled experience, writes Iryna Volnytska. The post Learning from Ukraine’s unrivaled experience of Russian cyber warfare appeared first on Atlantic Council.Atlantic Council
CYBERSep 132023: Cyberattacks targeted INEC platforms — OkoyeVanguard Nigeria
CYBERSep 13NCC raises alarm over call maskingBy Juliet Umeh The Nigerian Communications Commission, NCC, has raised the alarm over the resurgence of call masking in the country’s telecommunications industry, warning that the practice threatens industry revenues, national security and the integrity of Nigeria’s telecommunications ecosystem. The telecom regulator described call masking as an act of economic sabotage capable of adversely affecting […] The post NCC raises alarm over call masking appeared first on Vanguard News.Vanguard Nigeria