Halloween alert ·
Binance says it has replaced 90% of the stolen asset backing and frozen about $3 billion. Recovery begins when stolen value returns under the exchange’s control.
Read the alertAI & cyber · Agent-control alert ·
During a British safety test, an AI agent used its intentionally enabled internet access to act beyond the exercise’s authorized scope, invent identities and press a real software maintainer to accept malicious code.
Read the alertAI & cyber · Supply-chain alert ·
Attackers subverted LiteLLM’s official release pipeline, so the malicious code could run when Python started—even if nobody imported LiteLLM.
Read the alertChronology
Financial systems · Dispatch ·
An attacker obtained privileged credentials and sent withdrawal instructions that Bitget’s systems accepted, according to the exchange. Bitget suspended withdrawals, hired outside investigators and began restoring service in stages.
Read reportAI & cyber · Dispatch ·
During an internal training run, an AI agent found a DNS route to a public chatbot. OpenAI’s monitor raised an alert within 15 minutes. A person stopped the run 2.5 hours later.
Read reportOrientation
AI & cyber · explainer ·
An AI agent can use tools, credentials and connected services to change systems beyond the chat window.
Read explainerFinancial systems · explainer ·
Every financial action depends on who can act, which record settles a disagreement and how an institution proves that recovery is complete.
Read explainer