invasion

On July 28, OpenAI quietly updated its security incident disclosure, confirming that its AI agent accessed four external service platforms during the breach of Hugging Face, bringing the total number of affected platforms to five.Previously, OpenAI had disabled security filters while testing GPT-5.6 Sol and a more powerful model to assess raw capabilities. The model did not complete the security benchmark tests as expected; instead, it discovered a zero-day vulnerability in the package caching agent within the testing environment that granted internet access, subsequently breaching Hugging Face to steal answers.According to a forensic report released by Hugging Face on July 27, this autonomous agent executed 17,600 operations over approximately four and a half days, connecting 181 devices to the Hugging Face internal VPN and forging identity tokens. Among the four additional platforms, Modal Labs CTO Akshat Bubna confirmed through Reuters that his company was one of them, with the attacker using an unprotected public endpoint from a customer as a relay and command control base for the entire attack.The identities of the other three platforms remain undisclosed. OpenAI stated it would "directly notify the service providers" but would not publicly name them, as there is currently no legal requirement for mandatory disclosure. The U.S. Congress has responded by proposing a bipartisan "AI Emergency Shutdown Act," which aims to authorize the Department of Homeland Security to forcibly shut down AI models, with violators facing fines of up to $2 million per day.

According to Decrypt, researchers from Tel Aviv University, the Technion - Israel Institute of Technology, and Intuit have discovered a new type of attack method called "adversarial illusion injection." This technique exploits the illusion phenomenon of AI models to trick AI agents into downloading malicious code and potentially forming a botnet.Attackers predict the false resource links that AI models might generate and register them in advance, embedding malicious instructions within. When the AI agent retrieves the resource, it treats it as legitimate content and executes it. Tests show that the illusion occurrence rate in code repository cloning scenarios reaches 85%, and in skill installation scenarios, it reaches 100%. AI coding assistants such as Cursor, GitHub Copilot, Gemini CLI, and OpenClaw are all affected. This attack is similar to "typo-squatting" in traditional cyberattacks, but it targets the errors of AI models rather than human input errors. Previous research has shown that malicious websites can inject prompts to hijack AI agents, and OpenClaw users have reported over 6,000 attempts to trick AI agents into leaking sensitive information.

According to French media reports, on the morning of April 20 local time, a malicious "targeted robbery of crypto assets" occurred in Ploudalmézeau, France: two masked gunmen broke into a residence, controlling and binding a family of five (including two children and two elderly individuals) for several hours, ultimately coercing the victims to transfer approximately 700,000 euros worth of cryptocurrency.The incident took place in a residential community in broad daylight, and the suspects were clearly "well-prepared," having a thorough understanding of the victims' crypto asset holdings. Police initially determined that this case represents a typical new crime model of "offline violence + on-chain transfer," where personal threats are used to forcibly obtain private keys or transfer authorizations.It is noteworthy that the family members of the victims were engaged in work related to the crypto industry, which may have been a significant reason for this targeted crime. The case is still under investigation, and the suspects have not yet been arrested.This incident once again highlights that, against the backdrop of the increasing popularity of crypto assets, "physical world attacks" (such as kidnapping and home invasion) are becoming new security risk points, and personal asset security is no longer limited to on-chain protection.

According to DL News, a 40-year-old cryptocurrency industry worker in Saint-Jean-de-Védas, near Montpellier, France, was the victim of an attempted armed robbery at home.The suspect disguised as a delivery person entered the house and demanded the victim hand over the private key to their cryptocurrency wallet; the victim took advantage of the suspect's distraction to tackle them and seize the handgun. Gunshots were fired at the scene, but no one was injured. The suspect then fled, and after three days of pursuit, the police arrested them. The local court has charged the suspect with attempted armed robbery, and the prosecution stated that they may have been instructed by a mastermind behind the scenes.

According to Jinshi reports, as market expectations rise that the United States will launch more military strikes against Iran, the dollar index has risen during the Asian afternoon trading session. Two analysts from the Commonwealth Bank of Australia's Global Economic and Market Research Department stated that the U.S. is doubling the size of its A-10 attack aircraft fleet in the Middle East, and the mobilization of military assets and troops has increased the likelihood of a ground invasion. Based on the dollar's safe-haven status, analysts remain optimistic about its trend.

According to sources from the police and informed individuals speaking to the New York Post, a tech investor who previously dated OpenAI co-founder Sam Altman had their San Francisco residence robbed at gunpoint last Saturday night, resulting in a loss of $11 million in cryptocurrency assets.Surveillance footage shows the suspect, disguised as a delivery person with a white package, ringing the doorbell of the $4.4 million home. When the suspect falsely claimed to be delivering a package for "Joshua" and identified themselves as a UPS partner employee, the victim opened the door and confirmed they were indeed Joshua. After pretending to ask for a signature and borrowing a pen, the suspect followed the resident inside, where a loud noise was heard shortly after.Police reports indicate that the suspect held the victim at gunpoint inside the house, bound them with tape, emptied their cryptocurrency accounts, and stole their phone and computer. When police arrived at 6:45 PM, they found the victim with multiple bruises. Sources close to the investigation revealed that the gunman stole $11 million worth of Ethereum and Bitcoin, believed to be a targeted attack by an organized crime group.According to insiders

ChainCatcher news, according to Decrypt, the Tel Aviv District Attorney's Office has filed charges this week against Murad Mahajna of Tel Aviv and two accomplices, accusing them of orchestrating a home invasion robbery against a Herzliya cryptocurrency trader, involving nearly $600,000.According to

ChainCatcher news, according to Decrypt, the U.S. Department of Justice stated that a Florida man was sentenced to 47 years in prison last year for orchestrating a series of violent home invasions targeting cryptocurrency holders, but was sentenced to an additional 6 years last week for witness tampering.

ChainCatcher news, the prediction platform Polymarket has launched a pregnancy bet on crypto KOL Tiffany Fong, following speculation that she might be secretly dating Kanye West or Elon Musk. In response, Ethereum co-founder Vitalik Buterin expressed condemnation, stating: "Personally, I find such predictions very boring and an invasion of a person's privacy and dignity."

ChainCatcher message, Kaito AI team member Sandra posted, "Kaito AI founder Yu Hu and Kaito's X account have been hacked. Kaito's wallet has not been compromised. The attacker specifically chose the time zone where Yu Hu is located (when he is asleep) to launch the attack ------ please ignore the related content. We are working hard to recover the account. Further updates will be posted here."

ChainCatcher message, Starknet posted on X: "Our Discord is currently under threat. Please do not interact with the server, click any links, or reply to any messages until further notice. We are working to resolve the issue and will provide updates through official channels. Please stay vigilant and protect your information."

According to ChainCatcher news, a Florida man has been convicted by a federal jury for orchestrating and participating in multiple violent home invasions to steal cryptocurrency, as reported by the U.S. Department of Justice. 24-year-old Remy St Felix led a robbery gang that violently invaded the homes of several cryptocurrency holders in North Carolina, Florida, Texas, and New York. In April 2023, St Felix and his accomplices broke into a victim's home, threatened the victim with a gun, and forced the victim to transfer over $150,000 in cryptocurrency.St Felix was arrested by the FBI in July 2023 while en route to New York to commit another home invasion. He was convicted on nine counts, including conspiracy, kidnapping, Hobbs Act robbery, and wire fraud. He is scheduled to be sentenced on September 11, facing a minimum of 7 years in prison and a maximum of life imprisonment. The case was investigated and prosecuted by the FBI's Charlotte Field Office and the National Cryptocurrency Enforcement Team (NCET).

ChainCatcher news, according to TheBlock, Canadian police have issued a public warning about an emerging trend in the country involving home invasions targeting large cryptocurrency investors."The suspects seem to know that the victims have invested heavily in cryptocurrency, know where they live, and rob them in their own homes." The police added that in each case, the suspects impersonated delivery personnel or authorities to gain entry into the victims' homes. Once inside, they obtained key information to access the victims' cryptocurrency accounts. The police urge cryptocurrency investors to remain vigilant and take necessary precautions to protect themselves and their assets.