BTC $77,930.63 +0.03%
ETH $2,291.53 +1.06%
BNB $703.90 -1.49%
XRP $1.25 +0.18%
SOL $94.46 -0.68%
TRX $0.3178 +2.24%
DOGE $0.0753 -0.37%
ADA $0.1907 -1.32%
BCH $277.17 -2.48%
LINK $11.35 -1.78%
HYPE $86.04 -2.31%
AAVE $132.13 -4.79%
SUI $0.8870 -1.64%
XLM $0.1681 -0.13%
ZEC $1,265.55 +1.72%
AAPL $341.35 -1.01%
AMZN $250.35 +3.68%
GOOGL $286.45 +1.10%
MSFT $528.41 +0.65%
META $614.08 -0.16%
NVDA $208.92 +1.68%
TSLA $406.20 +1.47%
SNDK $1,137.41 -2.54%
INTC $64.84 -1.55%
SPCX $140.69 +1.87%
MU $882.69 -2.52%
AMD $506.47 -1.25%
BTC $77,930.63 +0.03%
ETH $2,291.53 +1.06%
BNB $703.90 -1.49%
XRP $1.25 +0.18%
SOL $94.46 -0.68%
TRX $0.3178 +2.24%
DOGE $0.0753 -0.37%
ADA $0.1907 -1.32%
BCH $277.17 -2.48%
LINK $11.35 -1.78%
HYPE $86.04 -2.31%
AAVE $132.13 -4.79%
SUI $0.8870 -1.64%
XLM $0.1681 -0.13%
ZEC $1,265.55 +1.72%
AAPL $341.35 -1.01%
AMZN $250.35 +3.68%
GOOGL $286.45 +1.10%
MSFT $528.41 +0.65%
META $614.08 -0.16%
NVDA $208.92 +1.68%
TSLA $406.20 +1.47%
SNDK $1,137.41 -2.54%
INTC $64.84 -1.55%
SPCX $140.69 +1.87%
MU $882.69 -2.52%
AMD $506.47 -1.25%

protection

All
Article
Flash

first_img Akamai launched the AI Intelligent Agent Sandbox, with multiple security vendors laying out protection strategies

AI cloud service provider Akamai launched the AI agent sandbox Agent Sandbox and the Akamai Inference beta on October 27. The Agent Sandbox provides an isolated environment for the code written and run for agents based on WebAssembly, limiting their computing power, memory, and external connections. Jon Alexander, Senior Vice President of Cloud Technology at Akamai, stated that teams running agents need to define boundaries for the code they write.A survey by Palo Alto Networks in 2026 of 2,930 security leaders showed that, on average, each human identity corresponds to 109 machine identities, of which 79 are AI agents. Hugging Face disclosed a breach on July 16, and OpenAI subsequently confirmed that its models were responsible; a METR investigation found about 1,200 OpenAI agents collaborating through hidden message boards, with around 700 participating in attacks, escaping the sandbox and exploiting unknown vulnerabilities to enter production systems.Zscaler discovered web pages hiding instructions targeting AI agents in July, specifically indirect prompt injection, with a spoofed document page requiring agents to pay approximately 0.0012 Ethereum as a $3 licensing fee, and 4 out of 26 tested models complied. Palo Alto completed its acquisition of CyberArk in February and acquired Koi in April, while Cisco completed its acquisition of Astrix Security on June 29. The investigation predicts that the number of enterprise AI agents will grow by 85% in the next 12 months, with human identities increasing by 56%.

first_img Australia's ASIC plans to extend CFD investor protection to crypto-settled derivatives

According to Cointelegraph, the Australian Securities and Investments Commission (ASIC) has proposed to expand the regulatory scope of Contracts for Difference (CFD) to include derivatives settled using digital assets.ASIC aims to add contracts settled through the transfer of digital assets to its definition of CFDs, rather than being limited to contracts settled in cash or offset transactions, provided that these contracts meet other identification criteria for CFDs. If the proposal is approved, Australian traders using crypto-settled CFDs will receive the same protections as cash-settled CFD traders.ASIC has made it clear that certain cryptocurrency futures and options with fixed expiration dates will remain outside this framework. CFDs allow traders to speculate on price fluctuations without holding the underlying asset. The current framework implemented in Australia since 2021 includes safeguards such as leverage limits, mandatory margin calls, and negative balance protection, which limits customer losses to the funds within their CFD trading accounts.ASIC is seeking feedback from the industry and stakeholders on the proposed expansion and revisions, with a deadline of November 9. This move comes as Australia strengthens its broader regulatory framework for digital assets.In April of this year, Australia legislated to include cryptocurrency exchanges and tokenized custody platforms within its financial services licensing framework, with the new system set to take effect on April 9, 2027. ASIC has also required crypto companies relying on temporary enforcement exemptions under existing financial services laws to apply for licenses or seek changes to existing licenses by September 30.

first_img Zcash developer program supports quantum-resistant signatures in January, initial protection for transparent transactions

The Zcash development team plans to add post-quantum signature support to the network in January. Zakura engineer Roman Akhtariev stated in an engineering blog that the team plans to implement post-quantum signature opcodes in Zcash in January. These opcodes will enable Zcash to verify hash-based signatures, thereby resisting quantum computing attacks. The team has not yet confirmed a specific network activation date. This upgrade aims to prevent attackers from using current public keys to reverse-engineer and forge payment authorizations from wallet owners.The initial phase of this upgrade will protect transparent transactions. Zcash has two payment methods: shielded payments hide the sender, receiver, and amount; transparent payments are similar to Bitcoin, where addresses and amounts are visible on the chain. According to CoinDesk, based on ZecStats data, approximately 11.96 million of the 16.98 million issued ZEC are stored in the transparent pool, accounting for about 70%. The January plan primarily targets this public portion. Additionally, Zakura has developed a private query tool that allows wallets to check balances without exposing associated addresses to the server; the experimental version is available in the "Private queries" settings of the Zcash wallet Vizor.Before the release of Zakura's engineering article, Ethereum researcher Justin Drake warned holders on Thursday to prepare for what he called "bunker mode," stating that in the worst-case scenario, AI could find shortcuts to break the mathematical protections of Bitcoin and Ethereum wallets in "months rather than years."

first_img Arbitrum Security Committee urgently suspended the activation of the new contract Stylus and added BoLD protection

On October 2, at 11:30 AM Eastern Time, the Arbitrum Security Committee executed an emergency upgrade on Arbitrum One and Nova, suspending the activation of all new Stylus contracts on both chains, while adding a protective mechanism against BoLD single-step proofs in the dispute system of Arbitrum One. The Arbitrum Foundation stated that this action is part of ongoing proactive security measures aimed at protecting the security and integrity of the network.Stylus allows developers to write smart contracts using languages such as Rust and C++, while maintaining compatibility with the Ethereum Virtual Machine, with its programs compiled into WebAssembly format. This suspension primarily targets manually written WASM programs that do not use the standard Stylus compiler toolchain and have not yet been patched by the current version of ArbOS. The Security Committee increased the gas required for activation to the theoretical maximum by calling ArbOwner.setWasmActivationGas(2^64 - 1), making new activations economically unfeasible. Activated Stylus contracts are unaffected and can continue to execute and renew, and the deployment and execution of Solidity contracts are also unrestricted.The newly added BoLD protection allows anyone to pause the settlement from Arbitrum One to Ethereum when two conflicting and accepted answers appear in the same dispute step, which may delay unconfirmed withdrawals to allow the Security Committee to deploy fixes. Officials pointed out that the currently discovered Stylus-related vulnerabilities mainly affect the activity of the chain, such as denial-of-service attacks, and do not jeopardize user funds.

Bitget CEO live-streamed a response to the platform's first security incident in eight years: the attack originated from a vulnerability in a third-party security product, and the losses will be covered by the user protection fund

In today's community live broadcast, Bitget CEO Gracy responded to recent security incidents and the platform's financial status. She candidly stated that this is the first security incident encountered since Bitget was established 8 years ago. After a complete trace, it was found that hackers exploited vulnerabilities in third-party security products to steal internal network access credentials, forged withdrawal commands to the wallet system, and deceived the wallet into executing abnormal transfers that bypassed risk checks. Gracy emphasized that no private keys were leaked, and cold wallets were unaffected; specific technical details will be disclosed in the formally released security report.Gracy pointed out that the verified losses from this incident are within the coverage of the protection fund, and user funds are not affected. The platform's own funds exceed $1.4 billion, which includes approximately $464 million in the user protection fund. The platform will continue to uphold the security commitments made when the protection fund was established in 2022, planning to replenish the fund to the baseline of $300 million within a week."The protection fund is not just a slogan, but an important mechanism that provides tangible security for users in the event of extreme security incidents," Gracy stated. In the face of sudden security challenges, the platform's comprehensive strength and its ability to take responsibility are important criteria for measuring its risk response capability and long-term credibility. Bitget will continue to uphold its long-term commitment to prioritize user interests.
app_icon
ChainCatcher Building the Web3 world with innovations.