Cybersecurity
Cybersecurity news — Saturday 31 October 2026
12 stories from 4 sources, every one in English. Each links to its publisher.
-
Northflank security breach leads to abuse of customers' AI API keys
BleepingComputer
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys. [...]
-
New Android SMS of Death exploit can remotely crash unpatched phones
BleepingComputer
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by…
-
Reddit to lock content behind logins to fight scrapers
BleepingComputer
Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...]
-
From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
BleepingComputer
AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how beginners can build practical cybersecurity skills, use AI…
-
Chainalysis discloses data breach from "offensive agentic techniques"
BleepingComputer
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. [...]
-
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
The Hacker News
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized…
-
Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
SecurityWeek
A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities. The post Syrian Hacker Gets Prison Time in US After Over a Decade on the Run appeared first on…
-
Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
SANS ISC
Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.
-
YARA-X 1.22.1 Release, (Sat, Oct 31st)
SANS ISC
YARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes.
-
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The Hacker News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The…
-
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
The Hacker News
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported…
-
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
The Hacker News
Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million…