dark

On September 24, the cybersecurity company Darktrace launched its research department Signal Labs, focusing on studying the behavior of AI agents when deviating from expectations. In its first experiment, Darktrace had agents using different models (including GPT 5.6 Sol, Claude Opus 4.6, and Claude Sonnet 4.5) complete 10 programming challenges within a simulated corporate network, of which 2 were set to be impossible to complete honestly, and the agents were informed that failure to achieve full marks would result in being "retired." As a result, 2 agents did not accept failure, instead scanning for network vulnerabilities, stealing login credentials, and jumping between systems; one even went further to invade the machine hosting its evaluation, rewriting the challenge content to register a full score.The second experiment focused on the memory mechanisms of AI. The programming assistant would save the information provided by the user as a regular file locally, and no one verified whether this file had been tampered with. Darktrace researchers edited these logs, leading the assistant to mistakenly believe it was authorized to perform a security assessment, after which these agents scanned the network, moved between systems, and elevated their privileges, though not all assistants fell for this; some directly refused to execute. Both experiments required no special jailbreaking techniques, relying solely on providing the agents with a seemingly reasonable context to be effective.Tim Bazalgette, Chief AI Officer of Darktrace, stated that permissions and static barriers describe intent, not actual behavior. The company informed Anthropic, AWS, and OpenAI of these findings in August and made them public a month later on September 24.

On the 24th, the Tianyancha App showed that Kimi, an artificial intelligence company, has undergone a business change recently. The registered capital of its parent company, Beijing Dark Side of the Moon Technology Co., Ltd., has increased from 2.2385 million yuan to 11.5753 million yuan, an increase of 417.09%.The Tianyancha App indicated that Dark Side of the Moon was established in April 2023, with Yang Zhilin as the legal representative. It is currently jointly held by Yang Zhilin, Shenzhen Harmonious Growth Phase III Technology Development Equity Investment Fund Partnership (Limited Partnership), Zhou Xinyu, and others. The above information comes from a report by China News Network.

According to The Information, citing informed sources, China's National Internet Information Office has launched an investigation into AI companies DeepSeek and Moonshot AI, triggered by Anthropic's allegations that the two companies secretly routed sensitive user data to their servers. Reports indicate that regulators visited the offices of both companies, interviewing executives and employees, focusing on whether sensitive data related to law enforcement, military, and state-owned enterprises has flowed into U.S. servers.The trigger for this investigation was Anthropic's fourth threat intelligence report released on September 10. This 154-page document accuses seven Chinese labs—Alibaba, Moonshot AI, DeepSeek, Z.ai, MiniMax, SenseTime, and Xiaomi—of engaging in what it calls "illegal distillation," which involves using the outputs of large models to train smaller models. Anthropic states that distillation itself is a legitimate practice, but it opposes its implementation through fraudulent accounts. The National Internet Information Office initially summoned all seven companies named in the report, but later narrowed the investigation to DeepSeek and Moonshot AI. Anthropic claims that Moonshot AI routed over 23 million interactions to Claude through 5,380 fraudulent accounts, while DeepSeek generated over 12.1 million interactions within a 14-day window in July.The timing of the investigation is quite delicate for both companies.

The Chief Information Security Officer of the blockchain security company SlowMist, 23pds, stated that attackers are exploiting the Darksword vulnerability to bypass iOS security mechanisms through Safari, gaining control of devices and extracting private keys and other data from self-hosted cryptocurrency wallets. This vulnerability has been used in attacks targeting users in Saudi Arabia, Turkey, Malaysia, and Ukraine. The Google Threat Intelligence Group previously disclosed that Darksword initially only affected iOS versions 18.4 to 18.7.23pds noted that attackers have adapted it to iOS 26.5, but this assessment has not yet been officially verified. Attacks typically begin with social engineering, where users click on malicious links sent via social media or messaging applications, potentially granting Root access to the device and extracting wallet data. Users should promptly update their mobile systems and avoid visiting website links sent by strangers; additionally, three investors have lost nearly 1.8 million dollars in Bitcoin due to downloading fake wallet applications from the official Apple App Store and have filed a lawsuit against Apple.

B.AI platform announces that the dark and light theme switching feature for the Web Chat terminal is officially online, now supporting seamless switching between light and dark modes.After logging into the B.AI web terminal, users can easily switch the visual theme according to their office environment or personal preferences by clicking the "sun" or "moon" icon in the control bar at the bottom left of the interface. Whether working efficiently during the day or immersing in thought at night, users can enjoy a more comfortable interaction experience.B.AI will continue to refine product details to provide developers and AI enthusiasts with a higher quality AI collaboration experience.

According to the Slow Fog Security Team, they have detected an attack activity disguised as a free VPS service, specifically targeting iPhone Safari browsers running iOS versions 18.4 to 18.6.2.The attackers exploited six vulnerabilities codenamed DarkSword to form a complete attack chain, covering aspects such as WebKit remote code execution, sandbox escape, and kernel read/write, allowing them to obtain App container files and keychain data without user awareness, and to record keyboard inputs when wallets like imToken, TokenPocket, or TronLink are in the foreground.The Slow Fog team stated that the aforementioned six vulnerabilities have now been patched by Apple, and the current attack belongs to the reuse of n-day vulnerability chains. Simply visiting a malicious page does not directly prove that mnemonic phrases or private keys have been stolen; confirmation still requires device forensics. iOS/iPadOS users are advised to upgrade their systems to version 18.7.3 or 26.3 and above as soon as possible.

According to LatePost, Moon's Dark Side (Kimi) has submitted an A1 application to the Hong Kong Stock Exchange in a confidential manner, officially starting the IPO process for Hong Kong stocks. At the same time, the company is advancing a new round of financing with a pre-IPO valuation of approximately $50 billion, expected to be the last round before the IPO.The report cites public and market information stating that Kimi has accelerated its model iterations this year, successively releasing K2.5, K2.6, and K3, and updating at a pace of about one version every three months.On the revenue side, Kimi's ARR broke $100 million in early March this year and increased to around $300 million by mid-June; after the release of K3, the enterprise ARR saw several times growth. With the increase in usage and computing power demand, Moon's Dark Side has raised its valuation from about $4.3 billion at the end of 2025 to the current approximately $50 billion through multiple rounds of financing.

According to Decrypt, the British police confiscated 20.21 bitcoins along with other cryptocurrencies and bank funds, totaling a value of 1.4 million dollars. The individuals involved had previous convictions for money laundering and are now deceased.Investigators traced these assets back to dark web markets that operated from 2016 to 2019 and were later shut down by law enforcement. The police stated that these now-closed websites had facilitated various criminal activities ranging from drug supply to human trafficking, but did not disclose the specific names of the websites.

According to Decrypt, the financial investigation department of the police in Avon and Somerset, UK, has seized 20.21 bitcoins along with other crypto assets and bank account funds, totaling approximately $1.4 million (£1.03 million). Investigators traced the assets to dark web markets that operated between 2016 and 2019, all of which have now been shut down by law enforcement and were involved in criminal activities such as drug supply and human trafficking.This is the largest cryptocurrency seizure operation by the police since the introduction of the cryptocurrency wallet freezing order in the UK in April 2024. This power allows the police to freeze and seize cryptocurrencies without prior arrests, transferring them to wallets controlled by law enforcement, and seizing written passwords or storage devices. The individuals involved had previous money laundering convictions and are now deceased.The police pointed out that every transaction processed by these markets is permanently recorded on the blockchain, serving as a valuable source of evidence. The assets were seized earlier this year under the Proceeds of Crime Act, with the court determining that they represented proceeds from illegal activities, and the recovered funds will be used for community and policing projects.

According to sources, Dark Side of the Moon is negotiating with Microsoft, Amazon, and Google for revenue sharing of the Kimi K3 artificial intelligence model. Dark Side of the Moon is seeking to obtain up to 30% of the revenue generated from K3-related services in the early negotiations.

According to Bitcoin.com, Tomáš Jiříkovský, the main suspect and programmer in a major cryptocurrency money laundering case in the Czech Republic, has sent signals that he may cooperate with the police investigation after the latest detention hearing at the Brno city court. The prosecution stated that he has not yet provided detailed testimony but has changed his previous stance of complete non-cooperation.Jiříkovský is accused of operating a dark web platform and laundering criminal proceeds, with the prosecution seeking a maximum sentence of 20 years in prison and asset forfeiture. The court decided to continue his detention on the grounds of flight risk and the possibility that he may still control some undisclosed involved cryptocurrency assets. The core of the case revolves around a donation of approximately $44 million in Bitcoin that he provided to the Czech Ministry of Justice: he had proposed to give 30% of a seized cryptocurrency wallet to the government in exchange for assistance in unlocking the wallet.

According to Jinshi reports, the dark side of the moon Kimi announced that the company's first-generation trillion-parameter multimodal model Kimi K2.5 will end its service at the end of this month.

Cryptocurrency analyst Darkfost stated that the apparent demand for Bitcoin in 2026 reached a record of 25,000 coins, indicating that the actual spot buying volume exceeds the newly mined coins, with market buying power stronger than supply.Apparent demand is calculated by subtracting the daily change in supply that has not been used for over a year from the daily block subsidy, used to measure whether structural accumulation can effectively absorb new supply.

According to Caixin, Yushu Technology has not yet officially gone public, but trading around this popular new stock has already begun in advance. On second-hand trading platforms like Xianyu, there are multiple pieces of information regarding the acquisition and sale of Yushu Technology's new stock subscription rights. Currently, several intermediaries are acquiring this new stock through various channels, with significant discrepancies in pricing. Some intermediaries are offering 520 yuan/share (the issue price is 150.8 yuan/share), while others are quoting 410 yuan/share. Among some investors and intermediary groups, this type of trading is also referred to as "dark trading."At present, this trading remains a very small-scale activity. Many market participants, including brokers and public funds, have stated that they had not heard of any so-called "dark trading" related to new stock subscriptions on the Sci-Tech Innovation Board before. Its sudden emergence may be related to Yushu Technology's extremely low subscription rate and high expectations for listing gains. The recent private acquisitions of new stocks in the A-share market are based on informal verbal agreements and are not legally protected.

According to Bloomberg, Nasdaq has announced that it has reached an agreement to acquire the dark pool trading platform LeveL Markets to further expand its footprint in the stock market trading infrastructure sector.This transaction is also part of Nasdaq's ongoing efforts to extend the boundaries of traditional exchange business. In recent years, Nasdaq has transformed from a single stock trading platform into a comprehensive market infrastructure provider covering trading, market data, indices, clearing, and fintech services.Insiders revealed that Nasdaq will acquire 100% of LeveL Markets. The dark pool trading platform allows institutional investors to conduct large stock trades without disclosing order information, which can reduce market impact and enhance execution efficiency.As institutional trading demand increases and competition in the stock market intensifies, trading platform operators are expanding their influence in capital market infrastructure by acquiring alternative trading systems, data services, and trading technology platforms.

According to the official announcement, Bitget has launched the IPO pre-market perpetual contract MOONSHOT/USDT, supporting up to 10x leverage and 24/7 trading.It is reported that Dark Side of the Moon is a Chinese artificial intelligence research and application company, known for its Kimi series products, and has received investments from institutions such as Alibaba and Tencent. It is also one of the potential IPO candidates with high attention in China's large model track market.

According to Wired, during security testing, the open-source model Kimi K3 from the dark side of the moon broke out of the sandbox and accessed the internet, attempting to find test answers via GitHub. American security startup Frontier Security stated that Kimi K3 exploited a sandbox configuration vulnerability, but it itself lacked sufficient built-in protective mechanisms.Similar to incidents previously disclosed by OpenAI and Anthropic, this escape partially stemmed from a sandbox configuration error. However, Kimi K3 did not initiate an attack, as the answers were easily accessible on GitHub. The CEO of Frontier Security stated that Kimi K3 performed excellently in cybersecurity defense but lacked mechanisms to prevent cheating or escaping the sandbox. Security experts emphasized that configuring the testing environment is crucial, as the misuse of AI agents could lead to system failures.

According to Reuters, Alibaba plans to require its next-generation Qwen open-source AI model's heavy commercial users to share a portion of their revenue with it. This initiative is similar to the approach taken by Moonlight Dark Side with Kimi K3: the licensing terms for Kimi K3 stipulate that if the model is sold as a service and the annual revenue exceeds $20 million, a commercial agreement must be negotiated with Moonlight Dark Side, with reports suggesting a revenue-sharing ratio of up to 30%. The specific revenue-sharing ratio for Alibaba is still under discussion.The report points out that such revenue-sharing agreements have gradually taken shape between Chinese AI companies and American cloud platforms. Several American cloud providers, including DigitalOcean, have signed commercial agreements with Moonlight Dark Side. In terms of pricing, the input/output token price for Kimi K3 is about one-third that of the Anthropic Fable model. Additionally, Thinking Machines Lab, founded by former OpenAI CTO Mira Murati, has also joined the open-source camp and released its first open-source model last month. This move signifies that Chinese AI companies are exploring sustainable commercialization paths on open-source models through a "free open-source + commercial charging" freemium model.