AI agents are surfacing old vulnerabilities fast. Finding them is no longer the hard part. As a tech lead, my rule: every AI-suggested fix ships with a test that fails first. How is your team handling the flood of findings? #AI

Prevention is better than cure. Update iOS to the latest version. As SlowMist first published the findings about DarkSword exploiting iOS system level vulnerabilities few months ago, we've been closely monitoring the latest iOS adoption. Despite no significant phishing scam escalations, it's dangerous for users to not update the iOS. This finding lists almost all popular wallets. The only way to protect yourself is to update iOS. Switching wallets wouldn't help if you remain iOS 18 or below. The latest iOS version is 27.2 . Stay safe.

India Warns of AI-Powered Crypto Cyberattacks India’s CERT-In has warned about an AI-powered hacking group called “CRAFTY FALCON” targeting crypto exchanges and stealing cryptocurrency wallet keys. #India #CERTIn #CyberSecurity #CryptoSecurity #AI #CryptoExchanges #Blockchain #DigitalAssets

I read OpenAI's entire GPT-6 Cyber announcement so you don't have to. what actually matters: 1. found 81 new high-severity bugs in Firefox. Mozilla already shipped fixes 2. reproduced 1,724 Linux kernel bugs and built working exploits for 948, over 5x the older model 3. scores 48.5% on ExploitGym, up from 32.1% 4. stayed inside its assigned scope in 99.93% of tests, 100% with its safety prompt 5. OpenAI rates it "Critical" for cybersecurity, its highest risk level 6. only select security teams get access. not public 7. $1B in grants so smaller defenders can use it too for builders: the AI that writes your code can now find the holes in it. are you running any security check on what you ship?

🚨 Definitive’s Growth Lead’s Hot Wallet Fully Drained, Suspected Link to Railway Vulnerability Definitive’s growth lead, @theczarlos, announced on X that their old hot wallet was emptied early this morning, allegedly as part of a large-scale attack originating from “noble.base.eth,” and suspects a connection to the Railway vulnerability. He noted that the transfers were signed by his own wallet, indicating this was a theft due to mnemonic phrase or private key exposure. All compromised wallets (96 wallets drained within approximately 70 minutes) exhibited the same pattern; users holding hot wallets are advised to rotate immediately. The attacker prioritized Relay as the withdrawal channel. Relay subsequently confirmed it has blocked the associated wallets.

BeInCrypto: AI wallet agents risk loss via weak guardrails, not rogue code. $281,200 sent to attackers before recovery. Enforce spending caps, trusted recipients, kill switches—experts urge urgent action to protect funds.