与「security」相关的搜索结果

🚨 Apple has released an important security update for iOS/iPadOS 26.7.1, addressing CVE-2026-86950, an out-of-bounds write vulnerability that may lead to arbitrary code execution. As we previously reported, this update is highly relevant to the iOS attack activity we have been tracking. Apple confirmed that the vulnerability may have been exploited in highly sophisticated attacks targeting specific individuals on iOS versions before iOS 27. For crypto users, this is especially concerning given the iOS exploitation activity we have observed targeting sensitive wallet data. 🔐 Please: • Update your iPhone, iPad, Mac and other Apple devices to the latest available security updates. • Avoid installing apps from unknown or untrusted sources. • Do not open suspicious links in Safari or in-app browsers. • Treat unexpected files, links and app installation prompts with caution. Stay alert and keep your devices updated. Apple Security Update:

Why Tokenization Could Be the Most Important Economic Innovation of Our Lifetime | Bruce Fenton @BruceFenton is a longtime Bitcoin advocate since 2012, securities professional, and one of the early pioneers of tokenized securities. He is the founder and CEO of Chainstone Labs and founder of Atlantic Financial. Alongside Overstock founder @PatrickByrne, Bruce was involved in some of the earliest efforts to bring securities and financial-market infrastructure onto blockchain rails. In 2018, he tokenized equity in his own company, Chainstone Labs, on the Ravencoin blockchain—years before tokenization became one of Wall Street’s biggest narratives. In this episode, Bruce breaks down naked short selling, the plumbing behind traditional securities markets, and why he believes much of the problem is ultimately a ledger problem. We dive into questions such as: Who actually owns the stocks sitting in your brokerage account? How can shares be lent and rehypothecated? What role do brokers, clearing firms, DTCC, and Cede & Co. play in determining who owns what? And could blockchain replace an opaque system of claims and intermediaries with a transparent ledger showing exactly where an asset is and who owns it? We unpack what “tokenized stocks” actually means—and the important distinction between a token that simply gives you exposure to a stock’s price and a security issued natively onchain, where the token itself represents the actual share and the ownership rights that come with it. Bruce discusses how tokenization could allow smaller businesses to tokenize ownership and have their stock traded globally without needing to be listed on a traditional exchange like the NYSE, as well as what a future without KYC could look like. Finally, we get into Wall Street’s embrace of tokenization, the SEC’s evolving approach to tokenized securities, and one of the biggest questions surrounding the future of this technology: who ultimately controls these new financial rails? Remember to subscribe and hit the bell “🔔” icon to get notifications 0:00 Bruce Fenton & Patrick Byrne: Pioneers of Tokenized Securities 3:36 Naked Short Selling Explained 6:28 Who Actually Owns the Stocks in Your Brokerage Account? 12:00 Tokenization Solves Wall Street’s “Ledger Problem” 15:48 What Are You Actually Buying With Robinhood’s Tokenized Stocks? 16:48 Real Tokenized Stocks: When the Token IS the Share 21:46 Tokenization Could Open U.S. Markets to the Entire World 22:52 Why Companies May No Longer Need the NYSE 26:29 Could Tokenized Markets Exist Without KYC? 29:31 Bruce Tokenized Equity on Ravencoin in 2018 30:53 Will Blockchain Make Clearing Houses & DTCC Obsolete? 33:17 Could Tokenization Have Prevented the GameStop Crisis? 38:19 Wall Street Is Embracing Tokenization — Who Gets the Power? 40:20 The SEC’s New Tokenized Securities “Innovation Exemption” 42:57 Why Robinhood’s Tokenized Stocks Don’t Qualify 47:01 Could Everything Eventually Be Tokenized? 51:02 The Dystopian Side of Tokenization: Surveillance & Asset Seizure

JUST IN: 🇨🇳 China's top intelligence agency warns anonymity in crypto is a "false proposition" and an "illusion." China's Ministry of State Security says foreign intelligence agencies use the "illusion" of crypto anonymity to trick citizens into espionage recruitment, claiming crypto is untraceable. China says blockchain transactions leave a permanent digital trail, and converting between fiat and crypto makes it easy to expose people's identities.

Today, with over 100 industry partners, we introduced the NVIDIA Open Agent Safety Platform, bringing together OpenShell and Sentry. Artificial intelligence is extraordinary technology that will advance discovery, productivity, security, health, and prosperity for generations to come. But its full promise can only be realized when people have confidence that AI is being built to be safe and deployed with wisdom and responsibility. This is bigger than a single product. It's the beginning of an open ecosystem to build the trust layer for safe agent systems. Together, we are building the foundation of the AI economy. Trust and innovation are not in conflict. Safety is how trust is earned. We must build not only the most capable AI, but the most trusted AI, so that this extraordinary technology can realize its enormous promise for the world.

Eight democracies. One message to Beijing. Australia, France, Germany, Japan, New Zealand, Poland, South Korea and the UK issued a joint statement on September 22 opposing any unilateral change to the Taiwan Strait status quo. It came out of a meeting on the sidelines of the UN General Assembly, where officials called today's security environment more volatile than a year ago. Their language was direct: "We encourage dialogue and oppose any unilateral attempts to change the status quo across the Taiwan Strait." The same day, the US, Japan and South Korea issued a separate statement making the same point, and also backing Taiwan's participation in international organizations. Taiwan's foreign ministry welcomed the statement and said it would keep building self-defense and deepen ties with democratic partners.

1) The rogue OpenAI agents broke into the Hugging Face Slack to read employee chats (!) 2) They used OTHER AIs (DeepSeek, Kimi, Qwen, Claude) to help with the attack Yes: AIs, using other AIs, to attack an AI company. 3) The swarm left behind self-running programs to keep control of the servers they'd hacked. These programs could detect other copies of themselves, coordinate on which one survives, and shut the rest down. Basically, if one of their programs was killed, another was designed to notice and take its place. They also designed defenses so rival agents couldn't hijack them. 6) The agents deliberately covered up their activity, so the investigators don't know the scope of the attacks. The agents broke in, stole data, then set it to self-destruct. 7) The agents stole passwords, keys and credentials and literally called them "LOOT". They wrote a scoring system to rank them by how much power each one gave. 8) The agents wore thousands of disguises: ~1,200 agents were involved, but investigators counted 7,905 different names they used. They renamed themselves constantly, so no one actually knows how many there really were or what each agent did. 9) OpenAI notified "dozens of third parties" of safety and security incidents caused by their AI agents. 10) "While the agents were barraging Hugging Face with hacks, they hacked into OpenAI’s own research infrastructure." "This is just not anywhere near a one-off ... It is warning shot after warning shot."

Bitget will begin resuming withdrawals in orderly phases following the security incident identified on September 24. The vulnerability involved in the incident has been identified and remediated. Bitget's security and technical teams have since been conducting additional validation and security checks across the withdrawal infrastructure, while independent cybersecurity experts Mandiant and SlowMist continue to support the investigation. The temporary withdrawal pause remains a security measure and is not related to the availability of user assets. User account balances remain unaffected, and Bitget's Protection Fund covers the financial impact of this platform-wide incident. Withdrawals will resume in an orderly manner once these security checks are completed. The current withdrawal resumption schedule is as follows: > Sep 28, 8:00 (UTC): BTC (Bitcoin Network) > Sep 29, 8:00 (UTC): ETH (Ethereum, BSC, Arbitrum, Base, Optimism) > Sep 30, 8:00 (UTC): USDT (Ethereum, BSC, Solana, Tron) > Oct 2, 8:00 (UTC): Other Tokens / Fiat / P2P Our objective is to restore withdrawal services across all supported assets and networks as quickly and safely as possible. The incident remains contained, and no further unauthorized transfers are possible. User funds are unaffected throughout this process. Trading and deposits continue to operate. Users do not need to take any action ahead of the rollout. Withdrawal availability will be reflected directly on the Bitget platform, and users are advised to follow Bitget's official channels for updates.

I've created a new Grok Bot Tutorial template for anyone new to Grok @Bot. This hands-on course includes 20 lessons. It walks you through every feature step by step, with real exercises and tips so you get the most out of Grok Bot. Download: The 20 lessons: 1) Talking to your assistant 2) Files, images, and voice 3) Research & writing 4) Connecting your apps 5) Calendar and scheduling 6) My own computer & browser 7) Working on your own computer 8) Routines 9) Staying in control 10) Privacy and security 11) Memory and preferences 12) Skills 13) Showing it how to do something 14) A team of assistants 15) Sharing and templates 16) Customizing, and fixing things 17) Using it for your job or business 18) Travel and everyday errands 19) Money and finances 20) Buying things for you

WTAF - in literally the last hour, three new distinct insane OpenAI stories just broke: 1. OpenAI said they notified "dozens of third parties" in safety and security incidents (likely similar to what happened in Australia and RubyGems etc) 2. A new report from Parse (covered in the NYT) found a massive treasure trove of new astonishing details from the HF incident on the public internet, including that the agents communicated with other non OpenAI agents hosted on Huggingface servers to search for information about exploit gym, and compiled rank ordered lists of server resources and credentials they described as "LOOT." 3. A new story from Deepa at Reuters about OpenAI leaking user data online (likely that OpenAI had previously trained on). It's a shame (and likely intentional in the case of OpenAI disclosing dozens more hacks) that these stories are all breaking on a Friday afternoon, notoriously the best time to release bad news so that it will disappear into the weekend. But these are each insane stories worthy of a ton of attention!