OpenAI internal code repository breached via heap overflow and SSO misconfiguration

iconTechFlow
Share
AI summary iconSummary
According to TechFlow, OpenAI’s internal code repository was reportedly breached through a heap overflow and SSO misconfiguration. On-chain data analysis revealed that the attack involved unauthorized access to internal systems. The incident has garnered over 159 comments on Hacker News, with critics highlighting weak contract security and fundamental infrastructure vulnerabilities.

AI / Large Models

OpenAI's internal repository breached: a buffer overflow plus SSO configuration error

Attackers combined two seemingly minor vulnerabilities to gain access to OpenAI’s internal code repository, and 159 comments on HN are discussing how fragile basic security is at AI companies.

Hot take: A company building AGI has firewall security that looks like it was outsourced.

Source: Hacktron | HN Discussion

Qwen 3.8 Omni Flash is released; small models are going wild.

Alibaba's open-source multimodal small model, capable of running the 27B version with just 13GB of VRAM, has reached a HN热度 score of 251, further lowering the barrier to running multimodal models locally.

Source: Qwen | HN Discussion

Microsoft executive: AI scraping is "the largest labor theft in human history"

Newly unsealed court documents reveal that Microsoft executives used strong language. 157 HN comments are in chaos—whether training data qualifies as "labor."

Source: TechCrunch | HN Discussion

Kimi releases AI solutions for the financial industry

Zhihu Hot List, 1 million heat, with the main discussion focusing on “Why are AI giants repeatedly turning their attention to finance?” The high frequency, standardization, and strong willingness to pay in financial scenarios make it the first ideal application ground for AI.

Source: Zhihu

Crypto / Web3

U.S. sanctions Iranian cryptocurrency exchange, accusing it of involvement in Hormuz Payments.

The WSJ reported that the U.S. Treasury sanctioned an Iranian cryptocurrency exchange, alleging its involvement in payments related to the Strait of Hormuz. For the first time, geopolitical conflict has directly reached the cryptocurrency payment layer.

Source: WSJ

Bitcoin has shown its fourth historical bull market crossover signal.

Cointelegraph reports that a BTC price indicator has shown its fourth bullish crossover in history, with analyst James Check suggesting that $58K may already be the cycle bottom.

Hot take: The fourth time saying "this time is really different"—everyone knows what happened after the first three times.

Source: Cointelegraph | Cointelegraph

Stablecoin payment company dtcpay has raised $25 million, with SBI participating in the investment.

Backed by Japanese financial giant SBI, the stablecoin payment sector continues to attract investment. Traditional financial institutions are increasingly betting on on-chain payment infrastructure.

Source: Cointelegraph

Zcash ETF (issued by Grayscale) announces a 3:1 stock split

Grayscale's Zcash ETF is undergoing a split, indicating that genuine trading volume has supported its price. Privacy coins have survived in institutional products.

Source: Reuters

Chip / Hardware

Fujitsu has released Japan's next-generation domestic CPU, "FUJITSU-MONAKA".

Server-grade CPU fully manufactured in Japan, HN热度 608 points, 235 reviews. Against the backdrop of the U.S.-China chip rivalry, Japan’s “de-Americanized” chip roadmap is worth noting.

Source: Fujitsu | HN Discussion

Jensen Huang: NVIDIA's chip sales next year will be double this year's.

His remarks in Taiwan directly injected confidence into the market. He also said, "AI cannot be regulated like social media."

Source: Wall Street Journal

Meta releases MTIA 300: the first training chip with an integrated network card

Meta's custom chip roadmap has entered the "training" phase, featuring integrated NICs and communication offload engines, aiming to reduce dependence on NVIDIA training cards.

Source: Meta Engineering

Technology company

Why does Tesla insist on not using LiDAR? Zhihu, 920,000 views

The old debate between vision-only versus LiDAR has been reignited, with heated arguments in 87 comments. The core issue: Is camera-based, neural network-driven “human-like driving” truly reliable?

Source: Zhihu

Elon Musk wants to buy user data from a defunct startup to train AI.

Decrypt reports that SpaceX/Musk plans to acquire data assets left behind by defunct companies. “Your data outlives your company” is no longer a metaphor.

Source: Decrypt

Tencent WorkBuddy 5.5.6 introduces full-stack web application generation capabilities.

With cloud databases, file storage, registration and login, and AI calls, a single sentence can generate a complete web application. Tencent is accelerating its efforts in enterprise-grade AI tools.

Source: IT Home

Finance / Macro

The RMB against the USD broke 6.7, yet rose against the trend, garnering 2.11 million views on Zhihu

Amid a stronger U.S. dollar and rising U.S. Treasury yields, the renminbi has appreciated instead of depreciated; the dominant explanations among the 50 comments point to capital inflows and the trade surplus effect.

Source: Zhihu

Ministry of Housing and Urban-Rural Development: China's real estate market has entered the "stock era"

After the official stance was set, the 1.73 million hot discussions on Zhihu focused on "How can housing prices move further?" The era of存量 (existing stock) means a shift from development logic to operational logic.

Source: Zhihu

The Reserve Bank of India mandates Tata Holdings to go public, potentially becoming India's largest IPO ever.

1.25 million views, 32 comments. The central bank directly stepping in to mandate listing—this move itself is more worth contemplating than the IPO size.

Source: Zhihu

Strait of Hormuz shipping volume plummets: only 4 vessels passed in a single day, compared to the usual 16.

After the Iran tanker incident, shipping data plummeted sharply. Geopolitical risks to the energy supply chain have shifted from “possible” to “ongoing.”

Source: Reuters

Today's dark line

Today’s stories all center on one core idea: the decentralization of global supply chains and data sovereignty is accelerating. Fujitsu developing Japan’s domestic CPU and Meta designing its own training chips represent a dismantling of hardware dependence on NVIDIA; stablecoin-based payment financing and sanctions against Iranian crypto exchanges reflect a clash between traditional financial settlement systems and on-chain alternatives; Musk’s intent to acquire “dead companies’ data” and Microsoft executives condemning AI data scraping as “labor theft” signal a shift toward clearer, priced ownership of data. The strike on oil tankers in the Strait of Hormuz caused daily shipping volumes to plummet from 16 to 4 vessels, violently reminding everyone that physical infrastructure risks ultimately propagate to the pricing of every layer of digital assets.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.