IT Security News Roundup: 2026-11-01 Afternoon

IT Security News: Afternoon roundup, 2026-11-01

Summary

The afternoon news is dominated by critical infrastructure vulnerabilities and the evolving risks of AI integration in both consumer and business environments. From remote root access in the Linux kernel to the privacy risks of smart home devices, a recurring theme is the danger of hidden access points. These stories highlight why constant patching and a critical eye toward third-party integrations are essential for maintaining security.

1. A new guide highlights top cyber range tools for 2026, emphasizing how SOC teams can use simulation to reduce the high average cost of data breaches.
2. Research reveals that robot vacuums, including those from iRobot and DJI, can collect sensitive home data and may have vulnerabilities allowing remote spying.
3. The Alpine Linux project rebuilt its GitLab server and reset all passwords following an attempted remote code execution attack.
4. A critical Linux kernel vulnerability (CVE-2026-98432) could allow remote root access, specifically affecting systems using Multipath TCP listeners.
5. The latest Security Affairs newsletter covers various international threats, including exploited flaws in Ivanti Connect Secure and Drupal Commerce.
6. The rise of AI agents performing financial tasks is creating friction with banks, as these agents often bypass security policies by using customer credentials.
7. OpenAI patched a high-severity flaw in ChatGPT where malicious share links could execute code to hijack sessions and expose private chats.
8. OpenAI is expanding its service by doubling Pro usage limits and integrating "Work" features directly into the standard Chat interface.
9. Polymarket users lost millions in a supply chain attack after malicious JavaScript from the monitoring tool DebugBear hijacked active sessions.
10. A new "SMS of Death" attack can crash Android phone services with a zero-click message, potentially blocking emergency calls.
11. Security researchers confirmed that a compromised website monitoring tool was used to siphon funds from logged-in Polymarket traders.
12. Northstar Security has launched with $7M in funding to use AI agents to identify and fix "toxic" combinations of security risks.
13. The FBI has identified 628 crypto wallets linked to North Korea's "TraderTraitor" following a massive $6.3 billion hack of Binance.
14. Five suspects involved in a 2022 art robbery at the European Fine Art Fair have been added to the EU Most Wanted list.

Summaries written with AI from the linked source articles.

Sources in this roundup

Most-mentioned keywords

Sources

1. The 5 Best Cyber Range Tools for Security Teams in 2026
2. The Robot Vacuum in Your Living Room May Know More About You Than You Think
3. Alpine Linux rebuilds GitLab after attempted RCE attack
4. Critical Linux Kernel Vulnerability Could Allow Hackers to Gain Remote Root Access
5. Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION
6. AI agents are upending digital business processes
7. ChatGPT Share-Link Flaw Could Expose Private Chats and Hijack Sessions
8. OpenAI says it's doubling Pro usage limits and bringing Work features to Chat
9. Polymarket Traders Lose More Than $2 Million in Supply Chain Attack Involving DebugBear
10. SMS of Death: Android under attack, an invisible SMS can block calls and emergency services
11. $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
12. Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
13. FBI Links 628 Crypto Wallet Addresses to North Korea’s Binance Hack
14. Five TEFAF robbery suspects added to EU Most Wanted