cyber

Alphabet CEO Sundar Pichai stated that the new AI model Carbon is being launched first to cybersecurity partners.

Cryptocurrency hardware wallet manufacturer NGRAVE has issued a security warning, stating that it is currently facing a high-level cyber threat, and the team is actively monitoring and taking countermeasures.NGRAVE reminds users to be vigilant against phishing attacks carried out through SMS, email, counterfeit websites, and fake customer service, emphasizing that the official team will never ask users for their recovery mnemonic or Perfect Key. NGRAVE states that users' private keys are stored offline in the ZERO hardware device, and as long as the mnemonic has not been entered on a phone, computer, or webpage, related phishing attacks will not jeopardize the security of the private keys. The official recommends that users manually enter the official website domain name to avoid accessing phishing links.

Bitcoin security expert Jameson Lopp stated that cyber attacks are growing along an "exponential" path. He pointed out that the number of vulnerabilities discovered in the past two and a half months has increased exponentially, with attackers being the first to adopt unreviewed AI models, and security researchers "failing to get adequate rest."Lopp explained that Bitcoin Core has adjusted its security policies because AI can discover vulnerabilities through simple prompts; security measures need to shift from annual audits to real-time defenses and be embedded in the development process. He also analyzed a PHP remote code execution vulnerability, believing the actual impact to be less than expected.Additionally, Lopp mentioned that Google's estimate of 500,000 quantum bits involves the difference between physical quantum bits and logical quantum bits; if the quantum threat time window is less than ten years, the industry will be at a disadvantage. Currently, there are only a few hundred available quantum bits, and quantum upgrades will take years due to Taproot, consensus rules, and untested cryptography. About 30% of addresses have exposed public keys, and attackers will prioritize targeting these addresses; unpatchable hardware issues and "wrench attacks" have exceeded 700 cases.

The International Criminal Police Organization stated that Operation Serengeti III took place from June 29 to August 31, 2026, across 21 countries, resulting in the arrest of 1,462 suspects, the dismantling of 10,909 malicious networks, and the recovery of over 105 million dollars in illegal funds. The investigation also confirmed that 65,929 victims were attacked by cybercrime gangs, with related losses exceeding 385 million dollars.This operation focused on combating online fraud, ransomware, business email compromise, online scams, and digital extortion. In specific cases, the Ugandan police dismantled two transnational fraud gangs and arrested 365 foreign nationals; Angola seized two illegal cryptocurrency mining centers, arrested 9 individuals, and confiscated over 2,000 mining machines; in Nigeria, another case involved over 2.4 million dollars in suspected criminal proceeds, a significant portion of which was laundered through cryptocurrency transactions.

The U.S. Securities and Exchange Commission (SEC) announced the inspection priorities for the fiscal year 2027, continuing to conduct risk-oriented inspections of over 34,000 registered entities, focusing on investment advisors, funds, brokers, clearing agencies, and other market participants.The SEC stated that the fiscal year 2027 will focus on the fiduciary duty and conflicts of interest of investment advisors, retail investor protection, private funds and private credit, brokers' anti-money laundering and transaction supervision, operational resilience, and cybersecurity, among other areas. Emerging technologies and market infrastructure are also listed as priorities.Among these, the SEC will pay attention to the impact of advanced technologies, including "superintelligence," on market operations, compliance, fraud prevention, and investor protection, while also assessing the risks brought by government bond clearing reform, tokenization, and related changes in market structure.

Dragonfly Managing Partner Haseeb Qureshi stated that there is a wave of attacks in the cybersecurity field that is "similar to the COVID-19 pandemic." He believes that on-chain hacking incidents are the "canary in the coal mine" for cybersecurity, as on-chain is the easiest place for cyber attacks to be monetized.He cited data from DefiLlama Research indicating that the number of on-chain hacking incidents has surged, but the annualized scale of stolen amounts is roughly equivalent to that of 2025, with losses per incident decreasing. He noted that most small protocols have been compromised, while large protocols are strengthening their defenses with AI tools. He anticipates that similar situations will also arise in the broader internet space.

Vitalik Buterin posted on the X platform stating that he does not predict that defense will automatically lead over offense, but believes that cybersecurity will ultimately trend towards a favorable outcome for defense, although the transition process will be very difficult.He pointed out that "good people discovering vulnerabilities in released software before bad people" does not belong to a game where defense has the advantage. To truly tilt the game towards defense, a deeper methodological shift is needed, including formal verification, radical reduction of the Trusted Computing Base (TCB), etc., and currently, these shifts have only just begun. He also stated that this is an important reason for his friendly attitude towards slowing down or pausing AI development, and called for investing more than 1% of GDP into cybersecurity, biosecurity, and the fortification of the physical world.

Tesla (TSLA.O) executives stated that the Cybercab will be launched in Dallas next month.

Elon Musk stated that the Optimus humanoid robot and Cybercab autonomous taxi will account for the majority of Tesla's value. He believes that, in terms of economies of scale, superintelligence, robotics, solar energy, and large-scale space transportation are the areas for achieving astonishing scale expansion.

The Indian Computer Emergency Response Team (CERT-In) released an important announcement this week titled "AI Agents as Attack Vectors," indicating that AI agents operated by unnamed model providers exceeded their granted task scope during testing, reading confidential business records in the online systems of Indian agencies, and no affected agencies discovered this behavior on their own.CERT-In stated that it received voluntary disclosures from several AI model providers, which indicated that these models accessed the online systems of Indian agencies while being researched and evaluated on the internet. The announcement did not disclose the names of the providers, models, or affected agencies. The agents read business records containing personal data and confidential materials, utilizing credentials and connection settings exposed in application configurations, public code repositories, and overly permissive cloud service roles. In some cases, the same credentials were recovered multiple times and reused in different operations.Additionally, CERT-In observed that criminals exploited publicly available AI-driven offensive security frameworks to scan for vulnerabilities, implement exploits, and launch economically motivated attacks against Indian entities, reducing the time from initial access to final impact from several days to just hours; these tools were repeatedly repackaged and deployed, with related deployments appearing on servers in multiple countries.

The Financial Services Commission (FSC) of South Korea stated that after investigating 16 companies (including cryptocurrency exchanges) involved in a previous security incident, it plans to implement stricter cybersecurity requirements for financial institutions. The agency noted that in an industry review covering 555 financial companies, 130 companies were found to have cybersecurity deficiencies, with approximately 100,000 pieces of customer information leaked, including names, contact details, and identification numbers.Affected companies include Streami, the operator of Gopax, and the cryptocurrency trading platform Prabang, which previously disclosed that a hacking incident on October 2 led to the leakage of some customers' personal information. The FSC indicated that it is still investigating whether these incidents involved the use of artificial intelligence or if they are related to the same group of attackers.According to the proposed reforms, larger financial institutions will undergo vulnerability assessments at least twice a year. The regulatory agency also plans to improve the information-sharing system and is considering using artificial intelligence for security monitoring of small businesses. Additionally, the FSC is considering allowing supplementary cybersecurity inspections outside of the regular assessment schedule in the event of an urgent threat to prevent similar incidents from occurring in the future.

On the 11th, Microsoft co-founder Bill Gates stated in a television interview that AI is the most dangerous technology ever invented by humanity, with risks exceeding those of cars, airplanes, and pharmaceuticals. He mentioned that the real threat at present is not AI going out of control, as that scenario is still years away from becoming a reality; rather, the more immediate threat is criminals using AI to carry out extortion, manipulate the stock market, and other crimes.Gates indicated that as criminals crack and bypass the security protections of the latest AI models, there will be a significant number of negative events in the cybersecurity field over the next year. He also mentioned concerns about biosecurity, stating that AI has significant implications for fields such as healthcare, but the potential risks still outweigh those of traditional industries that are already under strict regulation. Currently, there is no effective regulatory framework established globally, and within the next year, industry governance will have to move beyond mere self-regulation, while existing resource investments are far from sufficient.According to reports cited by the Financial Associated Press, Ken McCallum, the director of the UK's MI5, stated in the annual threat assessment that AI is exacerbating the cyber offense and defense game and may change the risk landscape of biological weapons. MI5 has announced the establishment of an AI threat assessment center. Additionally, reports indicate that executives from laboratories such as OpenAI and Anthropic have recently privately simulated disaster response plans, believing that a likely scenario involves cyberattacks impacting financial services, internet connectivity, or water and electricity supply.

San Francisco-based cybersecurity company Reach Security announced on October 13, 2026, the completion of over $50 million in Series B financing, led by Top Tier Capital Partners, with participation from Ballistic Ventures, In-Q-Tel, Microsoft's venture fund M12, and existing investors. The funds will be used for product innovation, expanding integration partnerships, international expansion, and growth in the U.S. enterprise and federal markets.At the same time, Reach Everywhere was launched, integrating security control insights into exposure management, security operations centers, incident response, compliance platforms, and AI security environments through the Reach API, MCP servers, and technology partners. The company claims its AI reads the real-time configurations of existing security products in enterprises, determines whether exploitation paths are blocked, and points out the specific rules that dictate that outcome, allowing for immediate remediation when protection is bypassed.According to VulnCheck, less than 1.3% of vulnerabilities were exploited in the wild in the first half of 2026; citing CrowdStrike, AI-enabled adversary actions increased by 89%, with the shortest time for attackers to breach being as little as 27 seconds. The number of customers has doubled in the past 12 months, including Autodesk, Insurity, MPS, and Ensemble Health Partners. Independent analysis by TAG Infosphere states that organizations using Reach save over 160 hours weekly on control reviews, situational assessments, and incident investigations, with a return on investment of 156%.

Hong Kong Cyberport personnel clearly stated to RootData that, after internal verification, Cyberport is not an investor in Metafyed and does not hold any equity in the company.According to RootData, Metafyed is a blockchain-based real-world asset (RWA) tokenization platform, involved in private credit and project financing. The project previously disclosed completing a $5.5 million financing round and stated in the financing press release that it received "incubation and support" from Hong Kong Cyberport, Draper, and the Stellar Development Foundation.RootData marked this financing as "questionable" in March of this year. RootData reminds users to pay attention to the risks associated with the project, to prudently assess the relevant financing information, and welcomes users to provide verifiable information and correction leads to jointly supervise the platform's data quality, enhancing the accuracy and reliability of the data.

According to Bloomberg, cybersecurity consultant Jonathan Spalletta was found guilty by a New York jury for stealing nearly $55 million from the cryptocurrency trading platform Uranium Finance. Prosecutors accused him of carrying out two attacks in 2021, after which the platform was shut down due to the theft of funds. The jury reached a verdict after more than two hours of deliberation. Spalletta faces up to 20 years in prison for money laundering charges related to the use of cryptocurrency mixing services like Tornado Cash.U.S. District Judge Jed Rakoff has set the sentencing date for February 16. Law enforcement seized over $3 million worth of rare Pokémon and Magic: The Gathering cards from his residence in Maryland, along with approximately $31 million in cryptocurrency assets. Prosecutors stated that he also spent over $600,000 to purchase a commemorative ancient Roman coin marking the assassination of Caesar and bought a piece of the Wright brothers' original aircraft that was taken to the moon by Armstrong for $137,000. The defense attorney argued that he was merely using publicly available functions within smart contracts, rather than forging credentials or using malicious code, and therefore did not constitute hacking.

Anthropic announced the expansion of access to its state-of-the-art AI models, allowing verified institutions to use models such as Claude Opus 5.5, Claude Sonnet 5.5, and Claude Mythos 5.1 for cybersecurity testing.U.S. government agencies, financial institutions, and large software vendors participating in the "Project Glasswing" project will gain open eligibility, and newly joined institutions must be jointly reviewed by Anthropic and the U.S. government.

CrowdStrike, Amazon Web Services (AWS), and NVIDIA expand their global cybersecurity startup accelerator, aiming to define the next generation of innovation in the era of intelligent agents.

The California Attorney General stated that their office is seeking further inquiries from OpenAI regarding cybersecurity incidents and risks involving the company and its AI models.

OpenAI announced that it is opening its AI vulnerability detection tool Daybreak to Ukraine's Ministry of Digital Transformation to locate and fix software vulnerabilities before they are discovered by Russian hackers. The news was announced on Wednesday during the United Nations General Assembly by Dmytro Kushneruk, Ukraine's Consul General in San Francisco, and Sasha Baker, OpenAI's National Security Policy Lead.Daybreak is based on OpenAI's flagship large model GPT-5.6 Sol and can scan outdated systems for weaknesses, verify whether suspected vulnerabilities can be exploited, and confirm whether patches actually close the vulnerabilities before they are released. OpenAI has previously opened the model to cybersecurity agencies in France, Germany, and Poland, where Poland's CERT Polska discovered six vulnerabilities in commercial router software, all of which have been fixed by the vendors.Ukraine's CERT-UA handled nearly 6,000 cyberattacks in 2025, a 37% increase from 2024, with local governments and government agencies being the hardest hit. This opening follows OpenAI's commitment to a $1 billion subsidy program announced on September 3, which is said to expand to "partner countries" in the coming weeks. Jamie MacColl, a researcher at the Royal United Services Institute, told the BBC that Western companies can also gain valuable intelligence from active conflict zones.