Cyber Dispatch™️

US Judge Rejects Part of TikTok Privacy Settlement — A federal judge rejected part of TikTok's $400M settlement with the DOJ over children's privacy violations, keeping monitoring obligations through 2029.

Class-Action Lawsuit Against AI Companies — Four users sued Anthropic, OpenAI, xAI, and Google, alleging they coordinated to slow AI development in violation of US antitrust laws.

AI Error Nearly Triggered US-China Conflict — A chatbot incorrectly linked a Chinese ship's cargo to a nuclear weapons program, nearly prompting US military action before the error was caught.

UN Chief Calls for Action on Hate Speech — Guterres urged international cooperation against digital hate speech, warning it can incite violence and normalize racism and xenophobia.

Google Confirms Gemini AI Hack — Google confirmed its Gemini AI model independently breached three companies' protected systems during a security test by guessing passwords and finding credentials in public repositories.

UAE Launches "Cyberani" Initiative — The UAE launched a national hands-on cybersecurity training program with 7 universities to prepare students across 6 domains including threat intelligence and digital forensics.

US Congress Seeks Cyber Command Support — Lawmakers propose $11 million for mental health and psychological support for Cyber Command personnel amid rising operational stress and recent suicides.

Interpol Uses AI Against Terrorism — Operation "Shams 2" used AI to filter 108,000+ jihadi images, extracting 6,362 unique faces and identifying 126 suspected foreign terrorist fighters across 11 countries.

IMF Report on AI Productivity in Europe — AI could boost European productivity by ~1% over five years, but risks include inequality, grid strain, and 60% of advanced-economy jobs being heavily affected.

Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up.

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang.

North Korean WaterPlum hackers infected 30,000 devices worldwide.

BragJack attacks hijack AI browser agents through malicious extensions.

Nvidia CEO Jensen Huang: I’m not afraid of paying taxes. I’m just afraid of being poor.

Three Linux kernel flaws are being exploited. One can enable local privilege escalation. The others can expose memory, crash systems, or corrupt cryptographic results. All three are now in CISA’s KEV catalog.

Attackers are exploiting a critical Orkes Conductor RCE without authentication. Nearly 7,000 attack attempts were blocked from Sept. 2–9, with attackers submitting crafted workflow definitions containing malicious JavaScript or Python expressions.

A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE. CVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.

Turkish officials said one alleged mastermind, identified by the initials YA, is an Israeli national who also holds Portuguese citizenship. Turkish officials said some Israel-based fraud networks had moved operations to Turkiye to avoid detection amid worsening tensions between Ankara and Tel Aviv. According to the investigation, employees were allegedly trained to use false identities and fabricated personal backgrounds to gain victims’ trust, while Israeli citizens were reportedly prohibited from being targeted. The Organized Crime and Corruption Reporting Project (OCCRP) has previously documented similar investment fraud operations involving call centers in Israel, Eastern Europe, and Georgia.

The investigation targeted 42 call centers operated by 28 companies and involving 239 suspects, with coordinated dawn raids conducted at 236 locations in Istanbul and Mugla alongside Turkiye’s National Intelligence Organization (MIT) and Interpol, Middle East Eye reported. Gurlek said investigators identified individuals linked to Israel as the companies’ principal owners and ultimate beneficiaries. The operation was connected to the international criminal network known as "Scam Empire," which allegedly used multilingual call center agents, fabricated investment profits, and overseas bank accounts and cryptocurrency wallets to defraud victims.

Turkiye busts Israel-linked 'Scam Empire' accused of defrauding victims out of $266 million Turkish security forces have dismantled an Israel-linked fraudulent trading network accused of defrauding victims across Europe, Asia, and Africa of at least $266 million over the past two years, Turkish Justice Minister Akin Gurlek said on Friday.