User funds are SAFU! Yet, this pregnant lady 👇 pulled an all nighter, along side hundreds of Binancians. Many industry friends and even competitors (including some previously-not-so-friendly ones) provided very much needed help. 🙏 It hurts, but we will survive. 💪

It is now table stakes to be running a 24/7 process of scanning for vulnerabilities and attempting to self-pwn your software/infra. This will be a compliance requirement for any business doing business with others.

Can I ask a DUMB tech question? Why is the Windows main drive called C:? What happened to A: and B:?

Pangolin Intelligence's Jonty says THORChain's volume spikes after North Korean hacks, with over 99% of it tied to laundering "When TraderTraitor hacks happen like this, and we've seen this with pretty much every TraderTraitor attack, Bitget, LayerZero, Bybit, the WazirX hack, etcetera, there are massive, massive spikes in the volume of funds that is being moved through THORChain." "To the point where 99% plus of the volume through THORChain on those given days is just people laundering money on behalf of North Korea." "Certainly on those particular days, it is virtually all of the volume and all of the fees that are being earned by affiliates and all of the fees going to the arbitragers. It's clearly just people laundering on behalf of TraderTraitor." "What kind of industry do we wanna build? If your principles just lead to enabling a state like North Korea to steal billions and billions of dollars of cryptocurrency, then I don't care how well those principles work in an ideal world." "In the real world, they're not offering anybody any value." "I don't subscribe to the idea that that's an industry that we wanna build."

'One of my favourite cyber security maxims is Halvar Flake’s observation that  “All offensive problems are technical problems, and all defensive problems are political problems”' ncsc.gov.uk/blogs/one-does-n… (spotted at @unpromptedconf and reshared here)

I would like to congratulate the organizers of the 2026 Cybersecurity Awareness Month for putting together a truly spectacular event

Your friend who pivoted into crypto in 2021 and then to AI in 2024 is about one week away from announcing their new cyber security startup

Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified. The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far. Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete. As an immediate precaution, Binance has: - temporarily suspended deposits and withdrawals while security checks are completed; - revoked the affected address authorisation; - engaged law enforcement and blockchain intelligence partners to trace and recover funds. Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice. Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions. binance.com/en/support/annou…

Security testing is moving from a yearly checkup to always on 18% of CISOs run most of their offensive testing continuously today, 52% expect to within a year They also want AI to close the loop, 70% would use it to retest and confirm their fixes actually worked From a16z's @OwenColby and @steph_zhang, breaking down a survey of 100 CISOs at companies with 1,000+ employees: a16z.news/p/the-new-security…

despite the unfortunate timing, we take disclosures seriously at @typesafeai at approximately 6:49PM this Friday evening, we became aware of a massive unauthorized leak of ALL customer noul outputs in effort to maximize transparency, here is the link: gist.github.com/diogo149/810…

as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)

Last week some of South Korea's biggest banks were hit by a cyberattack. Thanks to a report from CrowdStrike tonight, we now know the entire hack may have been done by a single person. He used a combined stack of an open-source AI penetration tool named ARTEX, DeepSeek v4.1-Flash, GLM-5.3, Grok 4.6, and Claude Code.