Today, page 34
Threat Intel
Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
The Hacker News + 1 outlet ·
AI
Northflank security breach leads to abuse of customers' AI API keys
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys. [...]
BleepingComputer ·
VulnerabilitiesHighCVSS 7.5
New Android SMS of Death exploit can remotely crash unpatched phones
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially…
BleepingComputer + 1 outlet ·
Reddit to lock content behind logins to fight scrapers
Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...]
BleepingComputer ·
AI
Chainalysis discloses data breach from "offensive agentic techniques"
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. [...]
BleepingComputer + 1 outlet ·
Identity
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
The Hacker News ·
AI
Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
Cisco Talos + 1 outlet ·
Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
Wireshark Release Candidate 5.0.0 was published : soon we can expect a new major version of Wireshark.
US-CERT / SANS Internet Storm Center ·
YARA-X 1.22.1 Release, (Sat, Oct 31st)
YARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes. Notice that there was also a release of YARA: 4.6.0 , and that this release does not include the YARA-X improvement that adds built-in functions to read 64-bit integers : int64, int64be, uint64, and…
US-CERT / SANS Internet Storm Center ·
Vulnerabilities
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
The Hacker News ·
Vulnerabilities
Linux security advisory (AV26-1108)
Serial Number: AV26-1108 Date: October 30, 2026 As of October 15, 2026, Linux is affected by a vulnerability in the following product: Linux Kernel Prior to 5.10.272 Prior to 5.15.223 Prior to 6.1.190 Prior to 6.6.159 Prior to 6.12.113 Prior to 6.18.56 Prior…
Canadian Centre for Cyber Security ·
AI
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful and operating at shocking speed.
CyberScoop ·
Vulnerabilities
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...]
BleepingComputer ·
Vulnerabilities
Linux kernel exploit enables remote root attacks on MPTCP servers
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...]
BleepingComputer ·
Investors Dish on New Startups & What They'd Back Next
Dark Reading ·
Friday Squid Blogging: Bigfin Squid Off California Coast
Neat video : The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean.
Schneier on Security ·
AI
DOJ raises privacy concerns over potential sale of Character.AI chats
The DOJ’s Executive Office for U.S. Trustees said a consumer privacy ombudsman is needed to advise the court on how to regulate what data from Character.AI can be sold and under what terms.
The Record ·