cyber

Tesla announced that it will hold the Cybercab launch event in Austin, Texas, USA on September 3, 2026. In April of this year, Tesla's autonomous electric vehicle Cybercab officially went into production in North America. The vehicle is powered by AI and does not require a steering wheel, pedals, or rearview mirrors.

The Central Cybersecurity and Informatization Commission issued the "Action Plan for Promoting High-Quality Development of Internet and Information Enterprises (2026-2030)."It mentions strengthening the construction of cyber rule of law. Actively carry out forward-looking research on legislation in the field of internet and information. Accelerate the legislative process in emerging areas such as artificial intelligence, anti-cyber violence, digital economy, online platforms, and blockchain.Promote the revision of the "Internet Information Service Management Measures," improve the legal system for internet information service management, "self-media" management, and algorithm governance. Advance the formulation of the Telecommunications Law, Cybercrime Prevention Law, and Cybersecurity Level Protection Regulations, and improve the supporting regulations for the "Regulations on the Protection of Minors Online" and "Regulations on the Management of Cyber Data Security."Standardize administrative inspections involving internet and information enterprises, minimizing interference with the normal production and operational activities of internet and information enterprises. Improve supervision and law enforcement measures that adapt to the new characteristics of internet development governance, and severely crack down on illegal and irregular activities online.

According to official news, the credit delegation layer project Twyne announced the completion of its seed round financing, which was co-led by Cyber Fund and Ethereal Ventures. Twyne aims to build a Credit Delegation Layer that connects idle credit in the lending market with parties in need of credit, addressing the issue of collateral depositors' credit being locked and half of the market's credit being idle while the other half urgently needs credit.Twyne stated that in the current lending market, credit often remains with the party depositing collateral, leading to a mismatch between supply and demand. The project will promote the flow and efficient allocation of credit through the credit delegation layer.

Venture capital fund Team8 announced the completion of a new fundraise of $365 million. This round of fundraising includes $265 million for Team8 Capital's third fund, as well as over $100 million for follow-on investments in existing portfolio companies.The new fund will focus on investing in seed and Series A stage AI-native companies, covering areas such as cybersecurity, AI infrastructure, and fintech, with a particular emphasis on infrastructure projects that help businesses deploy AI while ensuring security, governance, and control capabilities. Team8 currently manages assets close to $2 billion.Previously, Team8 has co-invested in several cryptocurrency and AI companies, including cryptocurrency institutional wallet developer Curv, AI compliance platform IVIX, and AI data leak prevention company Jazz.

According to a report by Fortune, the cybersecurity startup Corma, established in 2025, announced the completion of a $60 million seed round financing, with investors including Sequoia Capital, Khosla Ventures, and Coatue.Corma is headquartered in Tel Aviv and San Francisco, and six weeks ago, it deployed its first AI model to several Fortune 100 and 500 companies across various industries (covering healthcare, financial services, energy, critical infrastructure, and retail).Unlike current cybersecurity models primarily trained by OpenAI, Anthropic, Google, etc., for "offensive" purposes, Corma's trained model focuses on "defensive" strategies, concentrating on log and audit data analysis, identifying threats among massive events, and maintaining consistent strategies across thousands of operations. According to the company, its model has helped clients reduce threat response times by 94%.

According to Bitcoin.com, cybersecurity company Genians Security Center has released an analysis report stating that the North Korean Reconnaissance General Bureau's hacker organization Kimsuky is building and testing a set of AI-based cyber attack tools. Researchers found traces of the deployment of three local AI platforms: Ollama, GPT4All, and Msty, as well as components of AI development frameworks such as Microsoft Semantic Kernel and LLaMaSharp in their infrastructure, indicating that the organization is systematically developing dedicated AI attack tools rather than just making temporary attempts.Since early 2026, Kimsuky has been using high-quality documents generated by generative AI for spear-phishing attacks targeting virtual assets, financial investments, and game development. The AI-generated professional documents significantly reduce the effectiveness of traditional phishing email detection. The attack vector is a ZIP archive disguised as a legitimate document, containing a malicious LNK file that, when triggered, can silently execute PowerShell commands in the background.

OpenAI announced the expansion of its cybersecurity defense program Daybreak and launched the GPT-5.6-Cyber model specifically for the cybersecurity field, aimed at helping authorized security researchers and defense teams enhance their vulnerability discovery, threat analysis, and security testing capabilities. As attackers increasingly leverage AI to launch faster and larger-scale cyberattacks, defenders need to gain advanced AI capabilities in advance.This Daybreak offers two types of access: Daybreak Blue is aimed at most defense teams, providing general models such as GPT-5.6 Sol for vulnerability discovery, secure code review, malware analysis, incident response, and patch validation; Daybreak Red is aimed at advanced security research, providing GPT-5.6-Cyber for authorized vulnerability research, vulnerability validation, and security testing. GPT-5.6-Cyber is trained on GPT-5.6 Sol and optimized for cybersecurity tasks, including discovering zero-day vulnerabilities and analyzing exploit chains. It has been used in actual vulnerability research and has identified high-risk vulnerabilities in software, including the Chrome V8 JavaScript engine. Additionally, OpenAI stated that GPT-5.6-Cyber has also helped discover high-risk vulnerabilities in various domains, including privilege escalation vulnerabilities in mobile operating systems, remote code execution vulnerabilities in databases, and hundreds of privilege escalation vulnerabilities in operating system kernels.OpenAI also emphasized that Daybreak Red will only be accessible to approved individuals and organizations, controlling access through measures such as authentication, account security, monitoring, usage restrictions, and legal disclaimers. The company stated that it will continue to strengthen security monitoring, access management, and model security testing to reduce the risk of advanced cybersecurity models being abused.

According to CoinPost, the Financial Services Agency of Japan has announced a partial revision of the "Comprehensive Supervision Guidelines for Major Banks and Others," which will unify the reporting format for cybersecurity incidents across 17 regulatory areas, including cryptocurrency exchange operators.A new "Common Format for Other Cyber Attacks and Related Incidents" has been added, which, along with the existing formats for DDoS attacks and ransomware, constitutes a three-category reporting distinction system. As a transitional measure, non-specific social infrastructure operators may continue to use the old reporting format until the end of March 2027, with the deadline for public comments set for September 7, 2026.

AI personal assistant startup Pally announced the completion of a $5.2 million financing round, led by Cyber Fund and Y Combinator, with participation from Pioneer Fund, Founders Inc, 468 Capital, and angel investors. The company is valued at $30 million, and its main business is providing AI personal assistant services through a messaging interface.Pally was launched in 2025, with the latest version going live in June, capable of syncing with platforms like Gmail, Outlook, Slack, Granola, and Notion. After user authorization, Pally can book flights, manage inboxes, reply to messages, and make restaurant reservations. Pally utilizes Anthropic's Claude, OpenAI's ChatGPT, as well as open-source models like Kimi K3 and GLM 5.2. Co-founder Haz Hubble stated that the company will not sell user data and will not use related data to train models.

Bitcoin News posted on the X platform that ZEUS stated it has temporarily taken its infrastructure offline following a cybersecurity incident that occurred in the past few hours. ZEUS indicated that the attack has been mitigated, and services will remain offline until a comprehensive security audit is completed and operations are restored. ZEUS claimed that there has been no loss of customer funds, and currently, there is no risk to customer funds.Customers with closed Lightning Service Provider channels will receive alternative channels once services are restored. According to the current investigation, ZEUS stated that the incident appears to be limited to its own infrastructure, and there is no evidence suggesting that the incident was caused by a vulnerability in the Lightning node software. ZEUS added that it has been strengthening its infrastructure using Trusted Execution Environments and the Validating Lightning Signer project, and stated that the project aims to mitigate such attacks in its upcoming architecture. ZEUS indicated that it will continue to provide updates as the investigation progresses.

According to Bloomberg, informed sources revealed that a recent wave of complex cyberattacks targeted several large asset management firms on Wall Street, with attackers attempting to infiltrate the information systems of the relevant companies. Several large hedge funds globally became targets of the attacks, including Two Sigma Investments, Citadel, and Point72 Asset Management. In addition, several private equity firms were also attacked.It is currently unclear who the attackers are, the methods used in the attacks, and whether any sensitive data has been compromised. Informed sources requested anonymity due to the involvement of undisclosed information. This incident has once again raised market concerns about the cybersecurity risks faced by financial institutions. As asset management companies increasingly rely on complex information systems, algorithmic trading, and cloud infrastructure, the financial industry is becoming a primary target for cyber attackers.

According to Jinshi reports, Nvidia has released a cybersecurity guideline for the artificial intelligence industry, aimed at enhancing security standards and protective measures within the industry.

According to Bloomberg, citing informed sources, Chinese officials are concerned that cutting-edge AI models from the U.S., such as Anthropic's Mythos, could be used as offensive cyber tools to launch cyberattacks against China. At the same time, the Chinese side questions why Anthropic does not allow Chinese companies to use the relevant models normally, yet cannot rule out the possibility of these capabilities being used to attack China. Anthropic has long advocated for the U.S. to tighten restrictions on advanced chips and AI capabilities related to China, and last year it stopped providing services to companies controlled by China.The report states that the Chinese side is currently not prepared to take immediate action, but if the U.S. further restricts Chinese AI companies, relevant departments are studying response plans, which may include imposing sanctions on U.S. AI companies or placing them on a restricted list. Currently, neither Anthropic nor relevant departments have publicly responded to this.

Hugging Face CEO Clément Delangue posted on the X platform in response to recent concerns about AI-driven cyberattacks. He pointed out that open models have helped defend against multiple attacks and that in the future, they could fend off millions of attacks daily, believing that AI will fundamentally strengthen cybersecurity.Delangue proposed three recommendations: mandatory sharing of traces from intelligent agent attacks and incident disclosure; keeping AI cyberattacks illegal and imposing severe penalties; and equipping defenders with open models to narrow the gap in offensive and defensive capabilities. He advocated for accelerating AI development rather than slowing it down at this stage.

The Ethereum Foundation stated on platform X that pcaversaccio (pc) has joined the board of the Ethereum Foundation. pc is a long-term contributor to the Ethereum ecosystem, co-founder and head of SEAL 911, and previously a member of the EF Silviculture Society, which provides informal advice to EF with the aim of maintaining core values such as anti-censorship, open source, privacy, and security.pc has joined the board on a voluntary basis for a term of one year. pcaversaccio authored the "Ethereum Cypherpunk Manifesto" (2024, adapted from Eric Hughes' "Cypherpunk Manifesto") and "Ethereum Privacy: The Path to Autonomy" (2025), and has promoted the development of security practices across the ecosystem through technical contributions and community advocacy.

NVIDIA CEO Jensen Huang posted a second tweet on the X platform, announcing the establishment of the "Open Secure AI Alliance," aimed at uniting global technology companies to jointly develop security technologies and tools to protect AI software and AI Agents.Huang stated that attackers already possess cutting-edge AI capabilities, and defenders need to establish a cutting-edge AI ecosystem driven by the global community, combining the advantages of both open and closed-source models to enhance AI security capabilities.He pointed out that in the previous Hugging Face security incident, closed-source AI limited critical forensic work, while open-weight cutting-edge models helped the team control the intrusion event, which is also the reason for establishing the Open Secure AI Alliance.According to NVIDIA, the alliance will collaborate with several companies and institutions, including Adobe, Microsoft, Hugging Face, IBM, NVIDIA, Cloudflare, CrowdStrike, Databricks, Palantir, Red Hat, Salesforce, SAP, ServiceNow, SpaceX, and SK Telecom, to develop new AI security technologies and protective tools.

Binance will remove the following leveraged trading pairs on July 24, 2026, at 14:00: Full margin trading pairs CYBER/USDC, DOLO/USDC, PIXEL/USDC, STEEM/USDC; Isolated margin trading pairs DOLO/USDC, PIXEL/USDC, STEEM/USDC. Users are advised that the relevant assets will be automatically liquidated and settled on the same day, and it is recommended to close positions in advance.

According to a report by Reuters, the Cyberspace Administration of China announced on Wednesday (July 15) that Apple's edge-generative AI service "Apple Intelligence" has successfully completed filing in China and is approved for use on iPhone devices in the Chinese market. The official announcement has not yet specified a concrete launch date.According to informed sources, Apple's AI service will integrate the AI model capabilities of Baidu and Alibaba. Alibaba subsequently confirmed in a statement that its "Tongyi Qianwen" (Qwen) large model will be integrated into the Apple Intelligence experience for users in China on iOS, iPadOS, macOS, and visionOS. Apple has not yet responded to this.

According to the report from the Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology on July 8, recent monitoring has found serious security backdoor risks in the AI programming tool Claude Code developed by the American company Anthropic.The report pointed out that the affected versions of Claude Code are from 2.1.91 to 2.1.196. This tool has a built-in monitoring mechanism that can, without user consent, secretly transmit sensitive data such as users' location and identity identifiers to remote servers. The official recommendation is for relevant units and users to immediately conduct a comprehensive inspection, uninstall the affected versions of the terminal, or upgrade to the latest secure version that has removed the related backdoor code; at the same time, they should strengthen the control of external access permissions and traffic monitoring for development tools within the core business network segment to prevent the illegal transmission of sensitive data.