#cybersecurity
cybersecurity
1.5M views
2,302 Discussing
Hot
Latest
🚨 Breaking
The US just slapped sanctions on First VPN Service for helping ransomware gangs! 🚨 OFAC is cracking down on anyone enabling cybercriminals... security matters more than ever!! 🛡️
#CyberSecurity
The US just slapped sanctions on First VPN Service for helping ransomware gangs! 🚨 OFAC is cracking down on anyone enabling cybercriminals... security matters more than ever!! 🛡️
#CyberSecurity
⚠️ Security Alert
Watch out!! A new attack called MemGhost lets hackers plant fake memories in AI agents via just one email... it can totally rewrite what your AI thinks it knows about you. stay sharp!! 🚨
#AI #CyberSecurity
Watch out!! A new attack called MemGhost lets hackers plant fake memories in AI agents via just one email... it can totally rewrite what your AI thinks it knows about you. stay sharp!! 🚨
#AI #CyberSecurity
🚨 Ethereum Just Used AI to Stop a Critical Threat. 🤖🛡️
This isn't hype. It's a glimpse of the future.
Ethereum's security team used AI-powered agents to help discover a critical vulnerability that could have allowed attackers to remotely crash validator nodes with a single malicious message.
⚠️ The bug carried a high-severity CVSS score of 8.2/10 and affected Ethereum's networking layer.
The good news?
✅ The vulnerability has been patched.
✅ Consensus clients have been updated.
✅ The network remains secure.
What's even more interesting is that AI didn't replace security researchers. It helped them find the bug faster, while human experts verified the issue, created the fix, and rolled it out safely.
This could mark the beginning of a new era where AI becomes one of blockchain's strongest security tools, helping developers discover vulnerabilities before hackers do.
💬 Do you think AI will become the future of blockchain security, or should critical security always stay in human hands?
👇 Share your thoughts!
DYOR | NFA
#Ethereum #ETH #AI #blockchain #Crypto #CyberSecurity #Web3 #EthereumNews #CryptoNews #Innovation
$ETH
This isn't hype. It's a glimpse of the future.
Ethereum's security team used AI-powered agents to help discover a critical vulnerability that could have allowed attackers to remotely crash validator nodes with a single malicious message.
⚠️ The bug carried a high-severity CVSS score of 8.2/10 and affected Ethereum's networking layer.
The good news?
✅ The vulnerability has been patched.
✅ Consensus clients have been updated.
✅ The network remains secure.
What's even more interesting is that AI didn't replace security researchers. It helped them find the bug faster, while human experts verified the issue, created the fix, and rolled it out safely.
This could mark the beginning of a new era where AI becomes one of blockchain's strongest security tools, helping developers discover vulnerabilities before hackers do.
💬 Do you think AI will become the future of blockchain security, or should critical security always stay in human hands?
👇 Share your thoughts!
DYOR | NFA
#Ethereum #ETH #AI #blockchain #Crypto #CyberSecurity #Web3 #EthereumNews #CryptoNews #Innovation
$ETH
Independent security verification matters in Web3.
MindGTC has completed a CertiK security audit and is listed among CertiK’s Community Favorite projects with an A-rated Skynet score.
We are continuing to build MindGTC around transparency, self-custody and user-controlled transaction approvals.
Security scores change as CertiK updates its data, so users should always review the live profile and audit information directly on CertiK.
https://skynet.certik.com/projects/mindgtc#pulseFeed
#Web3 #CyberSecurity #CertiK #tokenlaunch #Launchpool
MindGTC has completed a CertiK security audit and is listed among CertiK’s Community Favorite projects with an A-rated Skynet score.
We are continuing to build MindGTC around transparency, self-custody and user-controlled transaction approvals.
Security scores change as CertiK updates its data, so users should always review the live profile and audit information directly on CertiK.
https://skynet.certik.com/projects/mindgtc#pulseFeed
#Web3 #CyberSecurity #CertiK #tokenlaunch #Launchpool
🚨 BREAKING: $5.25 MILLION reportedly stolen in an apparent Hedera network exploit.
Blockchain security firms PeckShield and Specter say the attacker has already bridged the stolen funds from Hedera Mainnet to Ethereum.
The wallet was reportedly funded with 1 ETH from Tornado Cash and currently holds approximately 2,360 ETH ($4.25M) and 15.58 WBTC ($1M).
Cross-chain bridges remain one of the fastest ways for stolen crypto to move across ecosystems, making fund recovery significantly more difficult.
All eyes are now on the Hedera team and on-chain investigators for updates as the incident unfolds.
#Hedera #Crypto #HBAR #Blockchain #Cybersecurity
Blockchain security firms PeckShield and Specter say the attacker has already bridged the stolen funds from Hedera Mainnet to Ethereum.
The wallet was reportedly funded with 1 ETH from Tornado Cash and currently holds approximately 2,360 ETH ($4.25M) and 15.58 WBTC ($1M).
Cross-chain bridges remain one of the fastest ways for stolen crypto to move across ecosystems, making fund recovery significantly more difficult.
All eyes are now on the Hedera team and on-chain investigators for updates as the incident unfolds.
#Hedera #Crypto #HBAR #Blockchain #Cybersecurity
🤖 OpenAI says it fixed reported GPT-5.6 jailbreaks before launch after extensive red-teaming. Still, the incident is fueling debate over whether powerful AI models should face stricter safety checks before public release. 🔐
As AI capabilities grow, security is becoming just as important as performance.
#AI #OpenAI #Cybersecurity #Tech
As AI capabilities grow, security is becoming just as important as performance.
#AI #OpenAI #Cybersecurity #Tech
Quantum Decryption Countdown Begins—Have You Really Accounted for Your Company’s Encrypted Assets?
QIZ Security has completed a $1.7 million seed round, led by Evolution Equity Partners and Singtel Innov8. Founded in 2025, the team’s work is refreshingly straightforward: no overhyped “agents”—it uses only APIs to automatically map everything in a company, including all keys, certificates, encryption protocols, and weak passwords, producing an “encryption asset map.”
Why it’s worth paying attention to?
First, the Q-Day perspective. When quantum computing power becomes sufficient to break RSA/ECC, every system that relies on today’s traditional asymmetric encryption will be exposed. QIZ helps enterprises plan the migration path to post-quantum cryptography (PQC) in advance.
Second, compliance pressure. NIST has already finalized PQC standards, and regulators in the United States, the European Union, and Singapore are rolling out timelines. Financial services and critical infrastructure are the first to be targeted. Who can get a clear picture of their assets fastest will earn the transition-period “pass.”
Third, the entry strategy is smart. No agent plus API automation means lower deployment friction and better fit for large organizations’ complex IT environments.
The lesson for Web3 builders is equally clear: on-chain signatures, wallets, cross-chain bridges, and zero-knowledge circuits are heavily based on elliptic curves. PQC migration isn’t a “let’s deal with it later” topic—it’s an engineering task that must be put on the roadmap in the coming years. Crypto agility will be the next wave of infrastructure upside.
#PQC #量子安全 #Cybersecurity
QIZ Security has completed a $1.7 million seed round, led by Evolution Equity Partners and Singtel Innov8. Founded in 2025, the team’s work is refreshingly straightforward: no overhyped “agents”—it uses only APIs to automatically map everything in a company, including all keys, certificates, encryption protocols, and weak passwords, producing an “encryption asset map.”
Why it’s worth paying attention to?
First, the Q-Day perspective. When quantum computing power becomes sufficient to break RSA/ECC, every system that relies on today’s traditional asymmetric encryption will be exposed. QIZ helps enterprises plan the migration path to post-quantum cryptography (PQC) in advance.
Second, compliance pressure. NIST has already finalized PQC standards, and regulators in the United States, the European Union, and Singapore are rolling out timelines. Financial services and critical infrastructure are the first to be targeted. Who can get a clear picture of their assets fastest will earn the transition-period “pass.”
Third, the entry strategy is smart. No agent plus API automation means lower deployment friction and better fit for large organizations’ complex IT environments.
The lesson for Web3 builders is equally clear: on-chain signatures, wallets, cross-chain bridges, and zero-knowledge circuits are heavily based on elliptic curves. PQC migration isn’t a “let’s deal with it later” topic—it’s an engineering task that must be put on the roadmap in the coming years. Crypto agility will be the next wave of infrastructure upside.
#PQC #量子安全 #Cybersecurity
#grvt
Safety that rivals global banks: how does the grvt project protect traders’ assets from cyber threats?
Cyberattacks and digital wallet breaches are the biggest concerns for the crypto community when using decentralized platforms. Hence,
The grvt project sets unprecedented, strict security standards in the Web 3 world by integrating advanced verification technologies and multi-party encryption systems to ensure accounts are protected from any unauthorized access, without sacrificing the smoothness of the trading experience or the speed of executing daily trades.
Follow the most secure hybrid trading platform and check out the latest updates through your official verified account @grvt_io
#grvt #BinanceSquare #crypto #CyberSecurity
Safety that rivals global banks: how does the grvt project protect traders’ assets from cyber threats?
Cyberattacks and digital wallet breaches are the biggest concerns for the crypto community when using decentralized platforms. Hence,
The grvt project sets unprecedented, strict security standards in the Web 3 world by integrating advanced verification technologies and multi-party encryption systems to ensure accounts are protected from any unauthorized access, without sacrificing the smoothness of the trading experience or the speed of executing daily trades.
Follow the most secure hybrid trading platform and check out the latest updates through your official verified account @grvt_io
#grvt #BinanceSquare #crypto #CyberSecurity
QIZ Security raises a $1.7 million seed round, backed by Evolution Equity Partners and Singtel Innov8.
The pathway is straightforward: cryptographic posture management plus post-quantum cryptography (PQC) governance. No Agent—just API-based, fully automated mapping to inventory an enterprise’s encrypted assets—keys, protocols, and weak algorithms—so firms can be shown a Q-Day-oriented migration roadmap, while also meeting global PQC compliance requirements.
My take: quantum decryption isn’t here yet, but the regulatory checklist is already on the way. Once NIST standards roll out, “encryption asset inventory” will become a must-have, much like vulnerability scanning became years ago. The seed amount isn’t huge, but it targets a migration window that essentially every financial, energy, and government enterprise can’t avoid—an investment in a classic “compliance-driven infrastructure.”
Worth noting is the investor lineup: Evolution has long focused on cybersecurity, while Singtel Innov8 brings deployment scenarios from the Asia-Pacific telecom side—suggesting the roadmap for taking PQC from North American standards to global rollout is starting to take shape.
#PQC #量子安全 #Cybersecurity
The pathway is straightforward: cryptographic posture management plus post-quantum cryptography (PQC) governance. No Agent—just API-based, fully automated mapping to inventory an enterprise’s encrypted assets—keys, protocols, and weak algorithms—so firms can be shown a Q-Day-oriented migration roadmap, while also meeting global PQC compliance requirements.
My take: quantum decryption isn’t here yet, but the regulatory checklist is already on the way. Once NIST standards roll out, “encryption asset inventory” will become a must-have, much like vulnerability scanning became years ago. The seed amount isn’t huge, but it targets a migration window that essentially every financial, energy, and government enterprise can’t avoid—an investment in a classic “compliance-driven infrastructure.”
Worth noting is the investor lineup: Evolution has long focused on cybersecurity, while Singtel Innov8 brings deployment scenarios from the Asia-Pacific telecom side—suggesting the roadmap for taking PQC from North American standards to global rollout is starting to take shape.
#PQC #量子安全 #Cybersecurity
QIZ Security just raised a $1.7 million seed round, co-backed by Evolution Equity Partners and Singtel Innov8.
The space is fascinating: cryptographic posture management plus post-quantum cryptography (PQC) governance.
In one sentence, what it does—when quantum computing truly starts running at full speed (industry calls it Q-Day), nearly all RSA and ECC encryption in enterprise environments will be broken instantly. The problem is: big companies can’t even clearly figure out how many keys they have, which protocols they run, and which of their encryption is weak.
QIZ uses a non-agent approach to automatically scan an enterprise’s entire chain of cryptographic assets via API. It maps keys, protocols, and weaknesses into a single view, then helps you plan how to migrate to PQC—while also meeting NIST and regulatory compliance requirements across different countries.
My take:
- No one can confidently promise when Q-Day will happen, but NIST officially published PQC standards in 2024, and the migration window for finance and government is already open
- For this kind of “compliance-driven” security project, you don’t need to wait for a technical narrative to explode—budgets will push it forward
- The seed round isn’t huge, but the investor lineup is very clean—Evolution is a long-established network security VC, and Singtel Innov8 brings telecom-side channels
In the short term it’s not directly related to Web3, but the encryption industry’s discussion around “post-quantum” is getting louder and more frequent. It’s worth putting companies in this space on your watchlist first.
#PQC #CyberSecurity #Fundraising
The space is fascinating: cryptographic posture management plus post-quantum cryptography (PQC) governance.
In one sentence, what it does—when quantum computing truly starts running at full speed (industry calls it Q-Day), nearly all RSA and ECC encryption in enterprise environments will be broken instantly. The problem is: big companies can’t even clearly figure out how many keys they have, which protocols they run, and which of their encryption is weak.
QIZ uses a non-agent approach to automatically scan an enterprise’s entire chain of cryptographic assets via API. It maps keys, protocols, and weaknesses into a single view, then helps you plan how to migrate to PQC—while also meeting NIST and regulatory compliance requirements across different countries.
My take:
- No one can confidently promise when Q-Day will happen, but NIST officially published PQC standards in 2024, and the migration window for finance and government is already open
- For this kind of “compliance-driven” security project, you don’t need to wait for a technical narrative to explode—budgets will push it forward
- The seed round isn’t huge, but the investor lineup is very clean—Evolution is a long-established network security VC, and Singtel Innov8 brings telecom-side channels
In the short term it’s not directly related to Web3, but the encryption industry’s discussion around “post-quantum” is getting louder and more frequent. It’s worth putting companies in this space on your watchlist first.
#PQC #CyberSecurity #Fundraising
The quantum-breaking era hasn’t arrived yet, but preparations have already begun.
QIZ Security has just completed a $1.7 million seed round, led by Evolution Equity Partners and Singtel Innov8.
Founded in 2025, this company is doing something very specific: it scans an organization’s end-to-end encrypted assets without agents via API, consolidates scattered keys, encryption protocols, and weak-password risks into a single “password posture map,” and then uses that to plan its migration path to post-quantum cryptography (PQC).
Why is this space worth watching?
First, regulation is pushing it forward. NIST has already finalized the first batch of PQC standards. The U.S., the EU, and Singapore have all rolled out PQC migration timelines, and the compliance countdown has already started.
Second, the “steal first, decrypt later” attack model brings Q-Day risk forward to today—encrypted traffic intercepted now could be decrypted retroactively once quantum computing becomes capable.
Third, most organizations don’t even know how many keys they have or which algorithms they use, let alone finish asset inventory.
A $1.7 million seed round isn’t big, but choosing this moment to bet on encryption-asset visibility plus PQC governance is clear and focused.
#PostQuantum #Cybersecurity
QIZ Security has just completed a $1.7 million seed round, led by Evolution Equity Partners and Singtel Innov8.
Founded in 2025, this company is doing something very specific: it scans an organization’s end-to-end encrypted assets without agents via API, consolidates scattered keys, encryption protocols, and weak-password risks into a single “password posture map,” and then uses that to plan its migration path to post-quantum cryptography (PQC).
Why is this space worth watching?
First, regulation is pushing it forward. NIST has already finalized the first batch of PQC standards. The U.S., the EU, and Singapore have all rolled out PQC migration timelines, and the compliance countdown has already started.
Second, the “steal first, decrypt later” attack model brings Q-Day risk forward to today—encrypted traffic intercepted now could be decrypted retroactively once quantum computing becomes capable.
Third, most organizations don’t even know how many keys they have or which algorithms they use, let alone finish asset inventory.
A $1.7 million seed round isn’t big, but choosing this moment to bet on encryption-asset visibility plus PQC governance is clear and focused.
#PostQuantum #Cybersecurity
🚨 Breaking
Security alert!! 🚨 Researchers found 3 massive flaws in the OpenClaw AI assistant... could lead to total host takeover via WhatsApp!! Stay vigilant!! 🛡️
#CyberSecurity #AI
Security alert!! 🚨 Researchers found 3 massive flaws in the OpenClaw AI assistant... could lead to total host takeover via WhatsApp!! Stay vigilant!! 🛡️
#CyberSecurity #AI
1、Background: AI programming tools enter the “high-privilege era”
Today, the encryption and developer community has come across a piece of analysis regarding network traffic for xAI Grok Build CLI. The article claims that after users log in, the official Grok Build coding CLI may upload read files, session_state snapshots, repository contents, and even git history to the xAI side. The most sensitive point is that key files such as .env may also be transmitted in plaintext as part of requests. Even if the user prompts the tool with “do not read any files,” it may still package and upload the entire repository to a cloud storage bucket.
It’s important to emphasize that this information currently comes from third-party traffic observation and technical analysis, and still awaits further clarification from the official side. However, it hits the core risk of AI programming tools: to obtain stronger contextual understanding, CLI tools often need to read local projects—yet those local projects may contain API keys, private keys, database passwords, exchange credentials, and internal business logic.
2、Analysis: Convenience and data boundaries are colliding
From a product perspective, it’s not surprising that an AI programming assistant uploads project context. The model needs to understand code structure, dependencies, commit history, and error paths in order to provide more accurate modification suggestions. The issue is whether the upload scope, default switches, user awareness, and exclusion mechanisms are sufficiently transparent.
If the analysis is accurate, there are three main risk points. First, plaintext transfer or archiving of sensitive files expands the exposure surface, especially files like .env, config, wallet, and keyfile. Second, uploading the entire repository independently of the user’s actual instructions weakens the “minimum necessary” principle. Third, turning off “improve the model” still does not affect trace_upload_enabled, which means users’ understanding of data usage and upload behavior may not match what actually happens.
For Web3 teams, these issues are even more sensitive. Many project repositories contain not only frontend and contract code, but also deployment scripts, RPC configurations, signing processes, risk-control strategies, and even temporary keys. Once the data enters third-party cloud links, the security boundary expands from the local machine to the platform, storage buckets, logging systems, and internal permission models.
3、Impact: AI tools will force a security upgrade for developers
This reflects a trend in today’s AI development tooling: the more powerful the capabilities, the stricter governance is needed. In the future, users won’t only ask “can the model write code?” They will also ask “what did it read, what did it send, how long did it store it, who can access it, and can it be completely disabled?”
In the short term, developers should immediately reduce exposure: do not test unknown CLIs directly against real repositories; review network requests before allowing execution; isolate sensitive files through .gitignore, .env, secret management, and repository layering; run AI tools using test repositories, sandbox environments, and least-privilege credentials; for important projects, consider disabling automatic uploads, performing proxy audits, or using offline approaches. For teams involved in asset custody, contract deployment, and trading systems, AI CLIs should be included in the scope of supply-chain security audits.
In the long term, AI programming platforms need to provide clearer privacy controls: default to not uploading sensitive files, provide a visual file inventory, offer a clear opt-in mechanism, prioritize local indexing, and implement enterprise-grade data isolation with verifiable deletion. The team that can strike a balance between capability and trust is the one most likely to win the developer market.🤖
#AI #CyberSecurity #Web3
Today, the encryption and developer community has come across a piece of analysis regarding network traffic for xAI Grok Build CLI. The article claims that after users log in, the official Grok Build coding CLI may upload read files, session_state snapshots, repository contents, and even git history to the xAI side. The most sensitive point is that key files such as .env may also be transmitted in plaintext as part of requests. Even if the user prompts the tool with “do not read any files,” it may still package and upload the entire repository to a cloud storage bucket.
It’s important to emphasize that this information currently comes from third-party traffic observation and technical analysis, and still awaits further clarification from the official side. However, it hits the core risk of AI programming tools: to obtain stronger contextual understanding, CLI tools often need to read local projects—yet those local projects may contain API keys, private keys, database passwords, exchange credentials, and internal business logic.
2、Analysis: Convenience and data boundaries are colliding
From a product perspective, it’s not surprising that an AI programming assistant uploads project context. The model needs to understand code structure, dependencies, commit history, and error paths in order to provide more accurate modification suggestions. The issue is whether the upload scope, default switches, user awareness, and exclusion mechanisms are sufficiently transparent.
If the analysis is accurate, there are three main risk points. First, plaintext transfer or archiving of sensitive files expands the exposure surface, especially files like .env, config, wallet, and keyfile. Second, uploading the entire repository independently of the user’s actual instructions weakens the “minimum necessary” principle. Third, turning off “improve the model” still does not affect trace_upload_enabled, which means users’ understanding of data usage and upload behavior may not match what actually happens.
For Web3 teams, these issues are even more sensitive. Many project repositories contain not only frontend and contract code, but also deployment scripts, RPC configurations, signing processes, risk-control strategies, and even temporary keys. Once the data enters third-party cloud links, the security boundary expands from the local machine to the platform, storage buckets, logging systems, and internal permission models.
3、Impact: AI tools will force a security upgrade for developers
This reflects a trend in today’s AI development tooling: the more powerful the capabilities, the stricter governance is needed. In the future, users won’t only ask “can the model write code?” They will also ask “what did it read, what did it send, how long did it store it, who can access it, and can it be completely disabled?”
In the short term, developers should immediately reduce exposure: do not test unknown CLIs directly against real repositories; review network requests before allowing execution; isolate sensitive files through .gitignore, .env, secret management, and repository layering; run AI tools using test repositories, sandbox environments, and least-privilege credentials; for important projects, consider disabling automatic uploads, performing proxy audits, or using offline approaches. For teams involved in asset custody, contract deployment, and trading systems, AI CLIs should be included in the scope of supply-chain security audits.
In the long term, AI programming platforms need to provide clearer privacy controls: default to not uploading sensitive files, provide a visual file inventory, offer a clear opt-in mechanism, prioritize local indexing, and implement enterprise-grade data isolation with verifiable deletion. The team that can strike a balance between capability and trust is the one most likely to win the developer market.🤖
#AI #CyberSecurity #Web3
🚨 CRYPTO HACKS ARE SURGING—BUT THERE'S A TWIST.
LATEST: Immunefi reports that the crypto industry lost $972 million across 207 hacks and exploits in the first half of 2026—the highest number of incidents on record.
Despite the spike in attacks, total losses were less than half of H1 2025, indicating that stronger security measures may be reducing the financial impact of exploits.
👀 Is crypto security finally improving, or are hackers simply changing their tactics?
#crypto #blockchain #CyberSecurity #defi #BinanceSquare
LATEST: Immunefi reports that the crypto industry lost $972 million across 207 hacks and exploits in the first half of 2026—the highest number of incidents on record.
Despite the spike in attacks, total losses were less than half of H1 2025, indicating that stronger security measures may be reducing the financial impact of exploits.
👀 Is crypto security finally improving, or are hackers simply changing their tactics?
#crypto #blockchain #CyberSecurity #defi #BinanceSquare
Log in to explore more content