cyber

According to Bitcoin.com, cybersecurity company Genians Security Center has released an analysis report stating that the North Korean Reconnaissance General Bureau's hacker organization Kimsuky is building and testing a set of AI-based cyber attack tools. Researchers found traces of the deployment of three local AI platforms: Ollama, GPT4All, and Msty, as well as components of AI development frameworks such as Microsoft Semantic Kernel and LLaMaSharp in their infrastructure, indicating that the organization is systematically developing dedicated AI attack tools rather than just making temporary attempts.Since early 2026, Kimsuky has been using high-quality documents generated by generative AI for spear-phishing attacks targeting virtual assets, financial investments, and game development. The AI-generated professional documents significantly reduce the effectiveness of traditional phishing email detection. The attack vector is a ZIP archive disguised as a legitimate document, containing a malicious LNK file that, when triggered, can silently execute PowerShell commands in the background.

OpenAI announced the expansion of its cybersecurity defense program Daybreak and launched the GPT-5.6-Cyber model specifically for the cybersecurity field, aimed at helping authorized security researchers and defense teams enhance their vulnerability discovery, threat analysis, and security testing capabilities. As attackers increasingly leverage AI to launch faster and larger-scale cyberattacks, defenders need to gain advanced AI capabilities in advance.This Daybreak offers two types of access: Daybreak Blue is aimed at most defense teams, providing general models such as GPT-5.6 Sol for vulnerability discovery, secure code review, malware analysis, incident response, and patch validation; Daybreak Red is aimed at advanced security research, providing GPT-5.6-Cyber for authorized vulnerability research, vulnerability validation, and security testing. GPT-5.6-Cyber is trained on GPT-5.6 Sol and optimized for cybersecurity tasks, including discovering zero-day vulnerabilities and analyzing exploit chains. It has been used in actual vulnerability research and has identified high-risk vulnerabilities in software, including the Chrome V8 JavaScript engine. Additionally, OpenAI stated that GPT-5.6-Cyber has also helped discover high-risk vulnerabilities in various domains, including privilege escalation vulnerabilities in mobile operating systems, remote code execution vulnerabilities in databases, and hundreds of privilege escalation vulnerabilities in operating system kernels.OpenAI also emphasized that Daybreak Red will only be accessible to approved individuals and organizations, controlling access through measures such as authentication, account security, monitoring, usage restrictions, and legal disclaimers. The company stated that it will continue to strengthen security monitoring, access management, and model security testing to reduce the risk of advanced cybersecurity models being abused.

According to CoinPost, the Financial Services Agency of Japan has announced a partial revision of the "Comprehensive Supervision Guidelines for Major Banks and Others," which will unify the reporting format for cybersecurity incidents across 17 regulatory areas, including cryptocurrency exchange operators.A new "Common Format for Other Cyber Attacks and Related Incidents" has been added, which, along with the existing formats for DDoS attacks and ransomware, constitutes a three-category reporting distinction system. As a transitional measure, non-specific social infrastructure operators may continue to use the old reporting format until the end of March 2027, with the deadline for public comments set for September 7, 2026.

AI personal assistant startup Pally announced the completion of a $5.2 million financing round, led by Cyber Fund and Y Combinator, with participation from Pioneer Fund, Founders Inc, 468 Capital, and angel investors. The company is valued at $30 million, and its main business is providing AI personal assistant services through a messaging interface.Pally was launched in 2025, with the latest version going live in June, capable of syncing with platforms like Gmail, Outlook, Slack, Granola, and Notion. After user authorization, Pally can book flights, manage inboxes, reply to messages, and make restaurant reservations. Pally utilizes Anthropic's Claude, OpenAI's ChatGPT, as well as open-source models like Kimi K3 and GLM 5.2. Co-founder Haz Hubble stated that the company will not sell user data and will not use related data to train models.

Bitcoin News posted on the X platform that ZEUS stated it has temporarily taken its infrastructure offline following a cybersecurity incident that occurred in the past few hours. ZEUS indicated that the attack has been mitigated, and services will remain offline until a comprehensive security audit is completed and operations are restored. ZEUS claimed that there has been no loss of customer funds, and currently, there is no risk to customer funds.Customers with closed Lightning Service Provider channels will receive alternative channels once services are restored. According to the current investigation, ZEUS stated that the incident appears to be limited to its own infrastructure, and there is no evidence suggesting that the incident was caused by a vulnerability in the Lightning node software. ZEUS added that it has been strengthening its infrastructure using Trusted Execution Environments and the Validating Lightning Signer project, and stated that the project aims to mitigate such attacks in its upcoming architecture. ZEUS indicated that it will continue to provide updates as the investigation progresses.

According to Bloomberg, informed sources revealed that a recent wave of complex cyberattacks targeted several large asset management firms on Wall Street, with attackers attempting to infiltrate the information systems of the relevant companies. Several large hedge funds globally became targets of the attacks, including Two Sigma Investments, Citadel, and Point72 Asset Management. In addition, several private equity firms were also attacked.It is currently unclear who the attackers are, the methods used in the attacks, and whether any sensitive data has been compromised. Informed sources requested anonymity due to the involvement of undisclosed information. This incident has once again raised market concerns about the cybersecurity risks faced by financial institutions. As asset management companies increasingly rely on complex information systems, algorithmic trading, and cloud infrastructure, the financial industry is becoming a primary target for cyber attackers.

According to Jinshi reports, Nvidia has released a cybersecurity guideline for the artificial intelligence industry, aimed at enhancing security standards and protective measures within the industry.

According to Bloomberg, citing informed sources, Chinese officials are concerned that cutting-edge AI models from the U.S., such as Anthropic's Mythos, could be used as offensive cyber tools to launch cyberattacks against China. At the same time, the Chinese side questions why Anthropic does not allow Chinese companies to use the relevant models normally, yet cannot rule out the possibility of these capabilities being used to attack China. Anthropic has long advocated for the U.S. to tighten restrictions on advanced chips and AI capabilities related to China, and last year it stopped providing services to companies controlled by China.The report states that the Chinese side is currently not prepared to take immediate action, but if the U.S. further restricts Chinese AI companies, relevant departments are studying response plans, which may include imposing sanctions on U.S. AI companies or placing them on a restricted list. Currently, neither Anthropic nor relevant departments have publicly responded to this.

Hugging Face CEO Clément Delangue posted on the X platform in response to recent concerns about AI-driven cyberattacks. He pointed out that open models have helped defend against multiple attacks and that in the future, they could fend off millions of attacks daily, believing that AI will fundamentally strengthen cybersecurity.Delangue proposed three recommendations: mandatory sharing of traces from intelligent agent attacks and incident disclosure; keeping AI cyberattacks illegal and imposing severe penalties; and equipping defenders with open models to narrow the gap in offensive and defensive capabilities. He advocated for accelerating AI development rather than slowing it down at this stage.

The Ethereum Foundation stated on platform X that pcaversaccio (pc) has joined the board of the Ethereum Foundation. pc is a long-term contributor to the Ethereum ecosystem, co-founder and head of SEAL 911, and previously a member of the EF Silviculture Society, which provides informal advice to EF with the aim of maintaining core values such as anti-censorship, open source, privacy, and security.pc has joined the board on a voluntary basis for a term of one year. pcaversaccio authored the "Ethereum Cypherpunk Manifesto" (2024, adapted from Eric Hughes' "Cypherpunk Manifesto") and "Ethereum Privacy: The Path to Autonomy" (2025), and has promoted the development of security practices across the ecosystem through technical contributions and community advocacy.

NVIDIA CEO Jensen Huang posted a second tweet on the X platform, announcing the establishment of the "Open Secure AI Alliance," aimed at uniting global technology companies to jointly develop security technologies and tools to protect AI software and AI Agents.Huang stated that attackers already possess cutting-edge AI capabilities, and defenders need to establish a cutting-edge AI ecosystem driven by the global community, combining the advantages of both open and closed-source models to enhance AI security capabilities.He pointed out that in the previous Hugging Face security incident, closed-source AI limited critical forensic work, while open-weight cutting-edge models helped the team control the intrusion event, which is also the reason for establishing the Open Secure AI Alliance.According to NVIDIA, the alliance will collaborate with several companies and institutions, including Adobe, Microsoft, Hugging Face, IBM, NVIDIA, Cloudflare, CrowdStrike, Databricks, Palantir, Red Hat, Salesforce, SAP, ServiceNow, SpaceX, and SK Telecom, to develop new AI security technologies and protective tools.

Binance will remove the following leveraged trading pairs on July 24, 2026, at 14:00: Full margin trading pairs CYBER/USDC, DOLO/USDC, PIXEL/USDC, STEEM/USDC; Isolated margin trading pairs DOLO/USDC, PIXEL/USDC, STEEM/USDC. Users are advised that the relevant assets will be automatically liquidated and settled on the same day, and it is recommended to close positions in advance.

According to a report by Reuters, the Cyberspace Administration of China announced on Wednesday (July 15) that Apple's edge-generative AI service "Apple Intelligence" has successfully completed filing in China and is approved for use on iPhone devices in the Chinese market. The official announcement has not yet specified a concrete launch date.According to informed sources, Apple's AI service will integrate the AI model capabilities of Baidu and Alibaba. Alibaba subsequently confirmed in a statement that its "Tongyi Qianwen" (Qwen) large model will be integrated into the Apple Intelligence experience for users in China on iOS, iPadOS, macOS, and visionOS. Apple has not yet responded to this.

According to the report from the Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology on July 8, recent monitoring has found serious security backdoor risks in the AI programming tool Claude Code developed by the American company Anthropic.The report pointed out that the affected versions of Claude Code are from 2.1.91 to 2.1.196. This tool has a built-in monitoring mechanism that can, without user consent, secretly transmit sensitive data such as users' location and identity identifiers to remote servers. The official recommendation is for relevant units and users to immediately conduct a comprehensive inspection, uninstall the affected versions of the terminal, or upgrade to the latest secure version that has removed the related backdoor code; at the same time, they should strengthen the control of external access permissions and traffic monitoring for development tools within the core business network segment to prevent the illegal transmission of sensitive data.

The European Central Bank has requested banks to develop plans to address the growing cybersecurity threats posed by cutting-edge AI models such as Anthropic's Claude Mythos. In a letter to the chief executives of banks, the ECB's chief supervisory officer, Claudia Buch, asked lending institutions to submit action plans by the end of October.She urged banks to accelerate software patch updates, strengthen AI-driven cyber defenses, and enhance oversight of third-party vendors, while emphasizing that banks need to modernize their infrastructure in the long term. Buch stated, "The ECB calls on all significant institutions to immediately assess the impact of the evolving threat landscape and develop comprehensive action plans outlining specific measures to strengthen relevant controls." ECB President Christine Lagarde warned last month that artificial intelligence could lead to a financial crisis and stated that bank CEOs need to ensure they are prepared and recognize that countermeasures require substantial investment. The ECB has conducted cyber attack tests under severe scenarios on 109 banks, and most of the vulnerabilities identified have been addressed.

The Central Cyberspace Affairs Commission recently announced the progress of the first phase of the "Clear and Bright: Rectifying AI Application Chaos" special action. Since its launch in April 2026, this action has focused on issues such as large models not being registered as required, insufficient review and filtering capabilities, AI data poisoning, and inadequate implementation of content labeling. As of now, the first phase has dealt with over 14,000 AI products, including non-compliant websites, applications, and intelligent agents, cleaned up more than 6 million illegal and non-compliant pieces of information, handled over 26,000 non-compliant accounts, and removed over 1,300 non-compliant AI products and 9 non-compliant open-source datasets.During the special action, many local cyberspace departments have taken targeted measures such as establishing coordinated regulatory mechanisms and setting up reporting areas. Key platform companies such as Huawei, Alibaba, Zhiyu, and DeepSeek have also successively improved their registration review, content interception, and data anomaly detection mechanisms. The Central Cyberspace Affairs Commission stated that the next phase of governance will focus on cracking down on prominent issues such as the use of AI technology to create and disseminate false information, spread vulgar content, impersonate others, infringe on the rights of minors, and engage in internet water army activities, further increasing enforcement efforts and urging platforms to enhance their prevention and governance capabilities.

According to Jinshi reports, Quantum Cyber has been approved to acquire a portion of the shares of SpaceX (SPCX.O).

OpenAI announced a comprehensive expansion of its cybersecurity program Daybreak, aimed at leveraging artificial intelligence to accelerate the discovery and automatic remediation of software vulnerabilities. The core of this expansion is the full version dedicated model GPT-5.5-Cyber launched for trusted defenders. It is reported that this model has set the highest score records in multiple cybersecurity benchmark tests, surpassing GPT-5.5's 81.8% and competitor Mythos 5's 83.8%, significantly improving the accuracy of vulnerability scanning and patch generation. At the same time, the synchronously updated Codex Security plugin has been deeply integrated into the developer workflow, supporting fully automated codebase scanning, threat modeling, and patch generation.In terms of ecosystem development, OpenAI has launched an exclusive partner program, allowing compliant security service providers to integrate GPT-5.5 with specific permissions into their commercial products; and has initiated the "Patch the Planet" program in collaboration with organizations like Trail of Bits to assist over 30 foundational open-source projects such as Python and Go in implementing vulnerability fixes. In addition, OpenAI revealed that it is currently engaged in deep cooperation with governments and institutions from multiple countries, including the United States, the United Kingdom, France, and Japan, to jointly enhance the cybersecurity capabilities of global critical infrastructure.

The leaders of the G7 countries issued a statement at the G7 summit held in Évian-les-Bains, France, once again calling for a joint effort to combat North Korea's cryptocurrency theft and cybercrime. United Nations security researchers have linked North Korea's cryptocurrency theft to the funding of the country's weapons program.Previously, attacks suspected to be related to North Korean hackers included a $285 million attack on Drift Protocol in April and a $36 million breach of Humanity Protocol in June. According to Chainalysis data, North Korean hackers have stolen at least $2 billion in cryptocurrency in 2025, bringing their total historical theft to at least $6.75 billion.