Stellar Blade studio confirms previous game Nikke was hacked and the launcher potentially impacted

gamesradar.com Nov 5, 2026

Stellar Blade studio confirms previous game Nikke was hacked and the launcher potentially impacted

Curated by Shubham · TechCapsules · Nov 5, 2026

AI-summarised brief · reviewed before publication

Shift Up, the studio behind Stellar Blade, confirmed a cyberattack on the PC launcher of its game Goddess of Victory: Nikke. On November 4, the official account announced that third‑party tampering had altered the launcher’s script files. The company is investigating the extent of the impact and collaborating with Level Infinite to develop a permanent fix. Shift Up apologized for the disruption and pledged to release further updates on mitigation measures.

💡 Why It Matters

· The incident underscores the vulnerability of popular game launchers to external tampering, potentially exposing user data and game integrity.
· It also highlights the rapid response required by developers to maintain player trust during security breaches.

Read full article on gamesradar.com

OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run

OpenAI disclosed a five‑stage AI pipeline that, over a 30‑hour run in mid‑October 2026, used an upcoming cyber‑focused model to dynamically reproduce 1,724 Linux kernel vulnerabilities and generate 948 working local‑privilege‑escalation (LPE) exploits for a popular Linux distribution. The prototype examined 2,308 candidate findings, produced proof‑of‑concept code for 291 information‑leak bugs, and identified at least ten novel exploitation techniques. The operation cost $1,213,430 in API credits, averaging $1,279 per LPE exploit. OpenAI highlighted the dual‑use nature of such technology, noting that while AI can accelerate patch creation and reduce exposure windows, the same tools are increasingly accessible to malicious actors, amplifying the speed and volume of zero‑day discovery across the industry.

💡 The ability to mass‑produce functional exploits at a predictable cost forces defenders to rethink patch cycles and automation, lest they fall behind a rapidly scaling threat landscape.

techcrunch.com · Nov 4

Hackers stole DreamHost customer files and inboxes during months-long attack

DreamHost disclosed a months‑long cyberattack that began in August, during which hackers accessed customer emails, credentials, and session tokens via an unspecified vulnerability in its file manager. The breach was revealed after a multi‑day outage that forced password resets. DreamHost confirmed that less than 10% of its 400,000 paying customers were affected, but did not provide a precise figure. The company stated the vulnerability was unrelated to recent PHP software flaws and is still investigating why the intrusion went undetected for weeks.

💡 The incident underscores the growing risk of session‑token theft, enabling attackers to impersonate users without passwords. It also highlights the need for web hosts to monitor and patch file‑management systems promptly to protect customer data.

quantumcomputingreport.com · Nov 4

IonQ Completes $1.15B Acquisition of Elisity to Integrate Zero Trust with Quantum…

Trapped‑ion quantum computing company IonQ completed a $1.15 billion all‑stock acquisition of cybersecurity firm Elisity, Inc. The deal includes an earnout of up to $150 million tied to revenue milestones through January 2028. Elisity’s identity‑based network microsegmentation software will be paired with IonQ’s post‑quantum cryptography and quantum key distribution roadmap, giving IonQ immediate access to corporate IT security budgets. The transaction follows IonQ’s recent purchase of SkyWater Technology, expanding its revenue base beyond scientific computing.

💡 By merging quantum‑safe encryption with proven zero‑trust software, IonQ positions itself to meet upcoming federal post‑quantum compliance mandates and capture a growing enterprise security market.

thehackernews.com · Nov 4

SonicWall Won’t Patch EoL GMS Flaws That Could Expose Files, Alter Database…

SonicWall announced that it will not issue patches for two security vulnerabilities affecting its end‑of‑life Global Management System (GMS) versions 9.5.2 and earlier. The company stated that because the product is EoL, no remediation will be released and urged users to upgrade to the SonicWall Network Security Manager (NSM). The decision follows a recent critical SSRF flaw (CVE‑2026‑102255) that has been actively exploited, with over 2,500 attack attempts recorded since October 9, 2026.

💡 The lack of fixes leaves existing GMS deployments exposed to known exploits, forcing organizations to migrate or face heightened risk of unauthorized internal access.

thehackernews.com · Nov 4

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and…

A critical flaw in Debian and Ubuntu’s APT package manager (CVE‑2026‑109518) lets attackers swap verified packages with malicious ones when APT retries failed downloads. The vulnerability, active from Debian 12 and Ubuntu 22.04 onward, allows code to run as root. Debian and Ubuntu have released patched APT versions, with Ubuntu Pro users of older releases also receiving updates. The flaw is exploitable via compromised mirrors or proxies and affects all distributions built on Debian and Ubuntu.

💡 The flaw exposes the core software supply chain, enabling attackers to gain root access on any system that relies on APT’s default retry logic. This threatens the integrity of the entire Debian/Ubuntu ecosystem and any derivatives that depend on it.

thehackernews.com · Nov 4

China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor

A China‑aligned threat actor, SlippyNunchucks, hijacked DNS requests in the Sogou Input Method to deploy the DarkVigil backdoor, targeting Chinese‑speaking users across Asia and Europe. The attack began July 1, 2026, exploiting insecure HTTP traffic to serve malicious configurations that download additional payloads via SGTool.exe. ESET identified the operation as a distinct intrusion set, noting its use of a modular .NET framework and DMTP for command‑and‑control. Tencent patched the vulnerability (CVE‑2026‑120422) on October 29, 2026, switching to HTTPS.

💡 The incident demonstrates how nation‑state actors can weaponize widely used language tools to conduct covert surveillance, bypassing traditional security measures. It underscores the need for secure communication protocols in everyday applications.