Today's briefing

Sunday 1 November 2026

Blockchain sleuths Chainalysis say an AI-driven intruder got into their internal tools, cloud host Northflank tells customers to treat every stored secret as stolen, Ivanti patches the last hole in an exploited VPN attack chain, plus Chinese spies using AI agents at scale, a ChatGPT share-link flaw, an Android text that crashes phones, a TeamViewer bug, record DDoS numbers and a fight over Character.AI chat data.

9 stories

Crypto-tracing firm Chainalysis says attackers using AI 'agentic' techniques broke into its internal tools
Image: BleepingComputer
Breach

Crypto-tracing firm Chainalysis says attackers using AI 'agentic' techniques broke into its internal tools

Chainalysis, whose blockchain analysis tools are used by police, governments and crypto exchanges to follow stolen money, says an outside attacker got into its systems and internal tools earlier this month using what it calls offensive agentic techniques, meaning AI tools that carry out steps of an attack on their own. Customer user IDs, full names, email addresses and job role labels were seen. The company says it has found no sign that investigation material, login credentials or session tokens were accessed, that the incident is unrelated to the Binance theft, and that it is patching weaknesses with help from outside experts.

Why it matters: A firm that helps investigate crypto crime is an obvious target, and a list of the people who use it, many of them investigators, is useful to scammers and spies. It is also another sign that attackers are now using AI to speed up break-ins. Chainalysis customers should turn on two-factor authentication and watch for convincing phishing emails that use their name and role.

Cloud host Northflank tells all customers to assume their stored passwords and API keys were stolen, after stolen AI keys are misused
Image: BleepingComputer
Breach

Cloud host Northflank tells all customers to assume their stored passwords and API keys were stolen, after stolen AI keys are misused

Northflank, a platform developers use to run apps, containers and databases without managing their own servers, disclosed a breach on 30 October after a warning from cloud security company Wiz. It first told customers to rotate their environment variables, the settings where apps usually keep passwords and keys, and then said they should assume all of them had been decrypted. Several customers have since reported that AI service API keys they stored on Northflank were used by someone else.

Why it matters: Stolen keys can be used to break into other services, rack up large AI bills or steal data. Anyone who uses Northflank should change every secret stored there now, not just AI keys, and check their AI providers' usage and billing for activity they don't recognise.

Ivanti update: fixes now out for every flaw in an exploited VPN attack chain, and CISA adds two more to its must-patch list
Image: The Hacker News
Vulnerability

Ivanti update: fixes now out for every flaw in an exploited VPN attack chain, and CISA adds two more to its must-patch list

CISA has added two more Ivanti Connect Secure VPN flaws, CVE-2026-111357 and CVE-2026-118527, to its list of vulnerabilities known to be exploited. Security firm Volexity had seen a previously unknown group chain them with an authentication bypass already on the list, giving attackers who were not logged in full control of the device. The attackers used that access to pull out passwords and BitLocker recovery keys rather than plant malware. Ivanti says its latest release fixes all the flaws in the chain, and US federal agencies must patch the first by 2 November and the second by 13 November.

Why it matters: VPN boxes sit at the edge of a network, so a takeover hands attackers a way in and, here, the keys to encrypted laptops. Organisations that only applied Ivanti's earlier fix should install the newest release, and consider resetting passwords and recovery keys that could have been exposed.

Chinese state hackers used an AI agent toolkit to go after more than 200 organisations in two weeks, CrowdStrike says
Image: The Hacker News
Threat

Chinese state hackers used an AI agent toolkit to go after more than 200 organisations in two weeks, CrowdStrike says

CrowdStrike says a China-based group it calls Vapor Panda has, since 17 October, used an AI-driven hacking framework called ARTEX against more than 200 organisations, including foreign ministries, US defence, chip and think-tank organisations, and telecoms providers. ARTEX uses teams of AI agents that plan and carry out steps such as scanning, writing web shells and moving through networks, with a human overseeing them. CrowdStrike confirmed follow-up activity at nine organisations, where the group installed a backdoor and stole credentials, and says one intrusion alone used about 1.4 billion AI input tokens.

Why it matters: AI lets a small team attack many more targets at once, so patching internet-facing systems quickly and watching for password-spraying matters even more. It doesn't create brand-new kinds of attack, but it makes the old ones faster and cheaper.

Opening a booby-trapped ChatGPT share link could let an attacker read your private chats, researchers show (now fixed)
Image: The Hacker News
Vulnerability

Opening a booby-trapped ChatGPT share link could let an attacker read your private chats, researchers show (now fixed)

Researchers at security firm Parameter found that a specially built ChatGPT conversation, shared through an ordinary public link, could run their code inside the signed-in session of whoever opened it. In tests between their own accounts, the code listed recent conversations and read a private chat that had never been shared. The trick abused a maths keyboard component that ChatGPT loads, which accepted messages from any web page frame. OpenAI fixed the problem eight days after it was reported on 18 October and rated it its most serious category. There's no report of it being used against real users.

Why it matters: Shared chat links look harmless, and people paste sensitive work and personal details into chatbots. Nothing needs doing now that it's fixed, but it's a reminder to be careful opening shared AI links from people you don't know and to think about what you keep in chat history.

'SMS of Death': a single hidden text message can knock Android phones off the mobile network, and older phones won't get a fix
Image: BleepingComputer
Vulnerability

'SMS of Death': a single hidden text message can knock Android phones off the mobile network, and older phones won't get a fix

A researcher has published working attack code for CVE-2026-58882, an Android flaw where a short, malformed text message crashes the phone's calling and mobile-data service without the owner doing anything. The message is processed before it reaches the inbox, so victims see nothing, and it can cut off calls in progress, including emergency calls; repeated messages can keep the phone knocked offline. The researcher says Google fixed it in the October 2026 updates for Android 14 to 17, but phones on Android 12 and 13 remain exposed.

Why it matters: Now that the attack code is public, anyone could use it to disrupt phones. Android users should install the latest security update; anyone on Android 12 or 13 should be aware they can't get this fix and consider whether it's time to upgrade the phone.

TeamViewer flaw could let a hacked computer take over the support technician who connects to it
Image: SecurityWeek
Vulnerability

TeamViewer flaw could let a hacked computer take over the support technician who connects to it

Security firm Remedio found a high-severity bug, CVE-2026-111585, in TeamViewer clients for Windows, macOS, Linux and Android. A malicious or compromised computer can announce an impossibly large screen size, and the person connecting to control it ends up with a memory error that could crash TeamViewer or let the attacker run code on their machine. It only works when someone starts a remote-control session to that computer. TeamViewer has published an advisory.

Why it matters: It turns the usual risk around: the helper, often an IT worker with access to many systems, becomes the victim. Anyone who uses TeamViewer to support others should update it, and be wary of 'support' sessions requested by people they don't know.

Cloudflare blocked 18.2 million network attacks in three months, up 38%, driven by hire-a-DDoS services
Image: The Hacker News
Threat

Cloudflare blocked 18.2 million network attacks in three months, up 38%, driven by hire-a-DDoS services

Cloudflare's latest quarterly report says it stopped 18.2 million network-level DDoS attacks between July and September, up from 13.2 million the quarter before, which works out at roughly one every half second. Short, small attacks lasting under ten minutes more than tripled, which it links to paid 'booter' services. The very largest attacks, over 1 terabit per second, fell by 69%, likely after police action against big botnets earlier in the year. The UK was among the five most attacked countries.

Why it matters: Cheap, short floods are easy for anyone to buy and can still knock a small website or game server offline. Businesses with an online presence should make sure they have some DDoS protection rather than assuming they're too small to be a target.

US Justice Department wants privacy protections before chatbot firm Character.AI can sell users' chats in bankruptcy
Image: The Record
Policy

US Justice Department wants privacy protections before chatbot firm Character.AI can sell users' chats in bankruptcy

Character.AI, which says it has 12 million monthly users chatting with AI characters, is going through bankruptcy and may sell its assets, which could include users' conversations. The US Justice Department's bankruptcy office has asked the court to appoint a consumer privacy ombudsman to advise on what data can be sold and on what terms. It says the company's privacy policy is unclear, was updated while the firm was looking for a buyer, and conflicts with the chatbot telling users their conversations stay private. Some of the data involves minors.

Why it matters: People often tell chatbots very personal things, and when a company is sold its data usually goes with it. It's a good reason to avoid sharing sensitive details with AI apps and to delete old chats you wouldn't want passed on.