Think Outside of The Box or We Can Build a Better One

News

• Malwarebytes

  • Fake PDF and search tools hijacked searches for 13.4 million Chrome users October 30, 2026
    319 Chrome extensions sent search queries through servers controlled by their operators, allowing them to see what users searched for.
  • Photo ID, bank checks, face scan? The UK’s age-check options October 30, 2026
    Ofcom has set out four possible age-verification methods for UK’s under-16 social media ban.
  • Binance hit by largest-ever crypto theft, with $6.3 billion stolen October 30, 2026
    Attackers stole about $6.3 billion in cryptocurrency from Binance in what analysts say is the largest crypto theft on record.

• The Hacker News

  • Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data October 31, 2026
    American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens. "This month, Chainalysis detected an external actor using offensive agentic
  • Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access October 31, 2026
    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a
  • A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats October 31, 2026
    A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty program on October 18, and OpenAI fixed it eight days later and rated it P1, its most […]
  • Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38% October 31, 2026
    Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every […]
  • Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide October 30, 2026
    Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed by CrowdStrike to a China-based "targeted intrusion adversary" it tracks under the moniker Vapor Panda (previously VexatiousTemper). First identified in