Cybercrime & Fraud
Northflank security breach leads to abuse of customers' AI API keys
BleepingComputer reports: Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys.
Cybercrime & Fraud
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
The Hacker News reports: American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens.
Cloud, Identity & SaaS
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
The Hacker News reports: Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026.
Vulnerabilities & remediation
New Android SMS of Death exploit can remotely crash unpatched phones
BleepingComputer reports: A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message.
Vulnerabilities & remediation
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The Hacker News reports: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild.
Vulnerabilities & remediation
From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
BleepingComputer reports: AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how beginners can build practical cybersecurity skills, use AI responsibly, and produce reproducible findings that stand up to scrutiny.
Security Operations
Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
SANS Internet Storm Center reports: Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.
Security Operations
YARA-X 1.22.0 Release, (Sun, Oct 25th)
SANS Internet Storm Center reports: YARA-X's 1.22.0 release brings 11 improvements and 9 bugfixes.