Cybersecurity news for Sunday, November 8, 2026.
The stories were published on Friday, November 6, 2026. Added on Sunday, November 8, 2026.
Criminals reportedly use an AI testing tool to steal gaming logins, Cyber Security News reports
Reported by Cyber Security News, published Friday, November 6, 2026.
What happened
Cyber Security News reports that criminals are using ARTEX, an AI-powered tool for testing websites, to break into sites with little human input. The article says the operator aimed the tool's AI agents at 13 servers behind a game, Honor of Kings, and that the agents recovered more than 190,000 sets of login details. It says about 3.3 percent still worked, which it puts at roughly 6,000 accounts, an estimate it gives to researchers at Check Point. The article also credits Check Point researchers with noting ARTEX activity more widely.
What the article says about how it happened
The article says the tool was first built for security teams to test their own systems. It says its developer later made it closed-source, but copies remain online. The article says some of the game servers kept login details in a plain file in a publicly reachable folder. The article adds that the risk comes from scale, not clever tricks. The article's advice is for companies, and we pass none on here.
Researchers report residential proxy services used White House network addresses, SecurityWeek reports
Reported by SecurityWeek, published Friday, November 6, 2026.
What happened
SecurityWeek reports on research from Layer3 Intel about residential proxy services. The article does not define them. In plain words, they are services that route other people's internet traffic through ordinary home internet addresses. The article says six addresses on the network of the Executive Office of the President were used by 28 such services. It says this happened between October 5 and November 3. It quotes the researchers saying their tests exited through that network 236 separate times.
What the article says about how it happened
The article does not confirm how a device becomes an exit point. It says Layer3 Intel suspects a device "infected with a proxy SDK", a software kit that adds the proxy feature. It says Synthient reports the traffic comes from Windows 11 computers running software from a proxy provider, Infatica. The article says most activity fell between 5 p.m. and midnight Eastern Time. The researchers say that suggests a person rather than a public guest Wi-Fi network. The article gives no advice.
