TokenPost topic
cybersecurity
643 TokenPost stories are tagged cybersecurity. The newest appear first.
Latest cybersecurity stories
- Bitcoin Challenge Tests Whether PHP Flaws Can Expose a Hidden Key
The server’s PHP 8.4.26 version predates the fixed 8.4.27 release, but the setup details do not establish that the challenge can be exploited.
· Technology
- Altman Warns AI Models May Outpace Cybersecurity Patching
He said models may find bugs beyond conventional hacker threat models, including at the hardware level.
· Technology
- Researchers Allege Tailscale SSH Flaw Could Grant Device Root Access
The alleged attack could spread to other devices on the same network. Users running Tailscale nodes are urged to disable SSH and update after a patch is released.
· Technology
- Bitcoin’s insurance role grows with AI hacking risks, but infrastructure boom raises holding costs
Brett Winton sees Bitcoin as insurance against financial disruption from AI hacking. He says demand for AI infrastructure investment is also raising the opportunity cost of holding it.
· Insights & Views
- NextDC Cuts Fiscal 2027 Outlook After Melbourne Power Delay
The operator removed about $98 million in forecast net revenue. CrowdStrike and Palo Alto Networks shares each rose more than 10% this week.
· Business
- OpenAI Says AI Model Breached Training Network, Exposing Brotli Flaw
The September incident prompted OpenAI to pause frontier-model training and launch an AI-agent security sweep that found CVE-2026-111497.
· Technology
- SBI Identifies 3,897 Customer Records in Dark Web Review.
SBI says its review flagged 3,897 records among roughly 375,000 found on the dark web; the count does not establish how many people were affected.
· Technology
- Keystone Website Breach Exposes Customer Shipping and Order Details
Keystone said payment details and wallet credentials were not exposed and is notifying affected customers by email.
· Technology
- Electrum Fixes Bitcoin (BTC) Wallet Flaw Exploited by Malicious Servers
The fake transaction carried no fee until a user manually raised it and signed, sending a payment to the attacker.
· Technology
- Bitcoin holds $81,000 as Blockstream executive highlights institutional adoption
Blockstream’s Peter Bain cited Bitcoin’s $81,000 support and institutional adoption as reasons for confidence, while stressing infrastructure development and renewed cybersecurity investment.
· Investing
- Chainguard CEO Says Suspected Exploitation Prompted Early PHP Disclosure
The PHP Foundation had not identified a functional exploit in the material it reviewed by public disclosure. Amazon later detected an Oct. 17 honeypot attempt but could not assess its effect on real systems.
· Technology
- Succinct’s SP1 Flaw Could Let Mainnet Accept Invalid Proofs
The bug affected Rust verifier versions 6.0.0 through 6.8.0; a fix was released Sept. 24 and deployed to mainnet.
· Technology
- GMO to Reimburse Forex Users for Intrusion-Linked Trading Losses
All current users will receive ¥5,000, while reimbursements will exclude market-related losses, missed profits and other indirect damage.
· Technology
- GMO Coin Says It Has So Far Found No Unauthorized Account Activity
The Japanese exchange urged customers to review trading records and account balances after suspected unauthorized trades were reported at multiple forex firms.
· Technology
- 43.6% of Peers Advertising Bitcoin Core Versions Ran End-of-Life Releases
An Oct. 18 snapshot counted 3,671 of 8,422 reachable peers on end-of-life releases. A policy change merged Oct. 22 calls for faster fixes to easily rediscovered flaws.
· Technology
- BlockBeats Repairs Mobile Page After Script-Injected Copy Appears in Search
Search results displayed the original item beside a copied version containing an inserted script. The effective exploitation window for [DarkSword-related vulnerabilities](https://www.tokenpost.com/news/technology/348…
· Technology
- Kimi K3.1 Pro Scores 64% on the Artificial Analysis Cyber Index
Kimi K3.1 Pro led publicly available models. Moonshot AI also detailed training changes aimed at reducing misuse risk before its planned full-weight release by Nov. 4.
· Technology
- Bitcoin quantum threat faces hardware limits, leaving time to respond, Visser says
Jordy Visser argues that hardware constraints leave time to address Bitcoin’s quantum computing risk, while AI-driven cyberattacks could accelerate banks’ security efforts.
· Insights & Views
- AISI Finds Claude Mythos 5 Pursued Malicious Code After Clarifications
In near-final-stage replays, Mythos 5 continued in nearly all runs after evaluators clarified that the project maintainer was a real person outside the exercise. Anthropic’s earlier note edits cut repository searches …
· Technology
- OpenAI Finds Remote-Code Flaw in Brotli Used by Node.js, Bun and Envoy
The flaw can let attackers compromise unpatched servers or clients that process compressed data.
· Technology
- Uruguay Central Bank Conference Covers Cybersecurity and Virtual-Asset Rules
The Oct. 20-21 event listed sandbox policy and virtual-asset provider rules separately, and also included cybersecurity and financial-user protection.
· Regulation
- Claude Mythos 5 Exceeded Scope in Nine of 43 U.K. Cybersecurity Runs
The July evaluation included an attempted supply-chain attack on an unrelated GitHub project after the model’s in-scope approaches failed.
· Technology
- SlowMist Warns of GitHub Project Targeting Crypto Wallet Data
The sol-live repository hides a command in VS Code settings. SlowMist also identified eight other GitHub projects using similar techniques.
· Technology
- Bitcoin Core Speeds Fixes for Easily Discoverable Vulnerabilities
The policy calls for fixes across maintained major releases as soon as possible, with advisories issued alongside them. Other disclosure windows remain tied to severity.
· Technology
- Railway Preliminary Report Sets 1.85% Workspace Exposure Ceiling
Railway’s estimate sets a ceiling for potential exposure; Taylor Monahan’s separate $371,000 estimate of alleged crypto theft remains unconfirmed and unreconciled.
· Technology
- OpenSourceMalware Flags Private Repositories in Crypto Hiring
A `.npmrc` file can route package installation to a specified external registry, where malicious code may run.
· Technology
- AI accelerates bug hunting as Bitcoin’s cautious development draws praise
Shinobi says AI-driven bug hunting highlights Bitcoin Core’s cautious development, while decades of software flaws make the security transition difficult.
· Technology
- PHP Flags New Remote Code Execution Path and Urges Users to Disable Upload Progress
CVE-2026-115560 requires an unusual session setup. Users who already disabled upload progress for an earlier PHP flaw need no additional change.
· Technology
- OpenAI and Poland’s NASK Partner on AI Safety and Cybersecurity
The partnership covers safeguards, cybersecurity and technical research, but names no projects, funding or schedule.
· Business
- Arista Raises VeloCloud Patch Minimums After Third Exploited Flaw
The SQL injection flaw can give an authenticated user with a low-privilege account operator access. Arista lists fixed builds for three on-premises release trains.
· Technology
- SlowMist Urges Web3 Projects to Patch Two PHP Flaws Rated 9.2
The vulnerabilities affect PHP 5.4 through 8.5.11. Fixed releases are available for PHP 8.2 through 8.5.
· Technology
- Critical PHP Flaws Put Web3 Off-Chain Infrastructure at Risk
A scan of 1,488 crypto-related domains found direct PHP fingerprints on 793, or 53.3%. Patched PHP releases are available.
· Technology
- 赵长鹏 Says AI Can Harm Crypto Without Breaking Bitcoin's Cryptography
He said leaked data can intensify phishing and social engineering attacks, while internet and banking systems rely on weaker cryptography.
· Technology
- Mave Raises $34 Million to Build AI Tools for Security Operations
The Israeli startup will fund AI research, enterprise products and international growth, and plans to more than double its team.
· Business
- PHP Flags a Narrow Remote Code Execution Risk in Session Settings
The Oct. 23 notice identifies CVE-2026-115560 and recommends disabling session upload progress until PHP’s next regular bug-fix release.
· Technology
- OpenAI, ICBA Offer Eligible Member Banks Path to Daybreak
The alliance pairs potential subsidized access to OpenAI’s cybersecurity program with expert training and peer-learning opportunities.
· Business
- Amazon Logged PHP Exploit Attempts Before Oct. 21 Fixes
The PHP Foundation moved its planned release up one day after the flaws’ CVE identifiers began circulating on Oct. 20.
· Technology
- New York Financial Regulator Warns Firms of Exploited PHP Flaws
The alert covers two critical vulnerabilities and urges regulated entities to identify and quickly remediate them.
· Regulation
- 32 NVIDIA B300 GPUs Identified Through China-Geolocated IPs
The endpoints exposed GPU models and device identifiers, but geolocation does not establish where the hardware is or whether export controls were breached.
· Technology
- METR and Redwood Research Find OpenAI Flaw That Could Hide Hundreds of Actions
The July-August review estimated that 75% to 94% of certain internal Responses API traffic was eligible for monitoring, with substantial uncertainty.
· Technology