印度试图关闭 Jack Dorsey 的比特币关联离线通讯应用 Bitchat
Related
Spiral, Jack Dorsey's Bitcoin development arm, plans to expand into the AI field.
According to Foresight News , The Block reports that Spiral, Jack Dorsey's Bitcoin development arm, is expanding into the AI field after incorporating core developers from Block's Goose project. The open-source project plans to develop Goose into a platform for agent-based AI development.
Former Twitter CISO Michael Coates appointed Chief Information Security Officer of the Solana Foundation
According to Foresight News , security expert Michael Coates announced on the X platform that he has been appointed Chief Information Security Officer (CISO) of the Solana Foundation, marking a new chapter in his career. Coates previously served as Head of Security at Mozilla, CISO at Twitter, and founded Altitude Networks, a startup focused on enterprise SaaS data security, which was later acquired by CoinList, thus entering the crypto industry. Coates stated that he chose to join Solana because the chain currently handles tens of billions of dollars in daily stablecoin transactions, exceeding the combined daily trading volume of most cryptocurrencies. He mentioned that future work will focus on integrating security capabilities into the foundation of industry operations and application security, addressing the unique security challenges of cryptocurrencies, and collaborating with policymakers and standards bodies to promote improvements in cybersecurity regulation.
JackYi: July to August may be the last bottom for Bitcoin, and also the best time to buy the dips.
According to Foresight News , Jack Yi, founder of Liquid Capital, tweeted, "This is the third wave of decline since October 11th. If we follow volatility theory and cyclical patterns, this is the last major drop for Bitcoin. The biggest concern is the bottom price for Bitcoin this time. The main factors are the US stock market and micro-strategies. We don't know if the Fed's concerns about CPI will trigger changes in expectations for interest rate cuts or even hikes, leading to a continued correction in the US stock market. Secondly, past bear markets have often seen black swan events or major crises at the end, but this hasn't happened yet, so close monitoring is necessary. Based on Bitcoin's high of $126,000, a 60% drop would be $51,000, and a 66% drop would be $43,000. In any case, July and August should be the last and best time to buy the dips, perhaps even the most worthwhile opportunity in the next three years."
SlowMist: A new malware variant has emerged in the npm ecosystem, affecting 408 GitHub repositories.
According to Foresight News , the SlowMist security team has issued an alert regarding a new variant of the Shai-Hulud/Miasma/Hades malware linked to the compromised developer account czirker within the npm ecosystem. This attack campaign triggers malicious code during the `npm install` process via a pre-configured file containing the string `binding.gyp`. A total of 23 packages have been confirmed to be affected, with leo-logger experiencing a staggering 3140 downloads per week. As of the time of this report, 408 compromised GitHub repositories containing the stolen credentials have been discovered. Potential attack behaviors include GitHub token theft, npm token theft, AWS/GCP/Azure cloud credential theft, on-premises data breaches, malicious abuse of GitHub Actions workflows, and further proliferation through the npm supply chain. SlowMist recommends that security teams immediately review locked files and package history, downgrade or remove affected packages, and rotate npm, GitHub, cloud services, CI/CD, and application keys, while also enforcing two-factor authentication (2FA).
BlockSec releases preliminary analysis of the Taiko attack: The attack is suspected to have been caused by the exposure of a Raiko SGX signing key on GitHub.
According to Foresight News , BlockSec Phalcon has released a preliminary analysis of the Taiko security incident. The root cause is likely the exposure of the SGX enclave signing key of Taiko's multi-prover component, Raiko, on GitHub. Attackers used this exposed key to register maliciously controlled SGX instances, bypassing the proof verification mechanism and forging state/signal proofs. The attackers then used the forged source signal to mark a fake cross-chain message as RETRIABLE and invoked retryMessage to extract canonical L1 assets from the ERC20Vault.
SlowMist: A new supply chain attack has emerged on PyPI, capable of stealing developers' cloud credentials such as GitHub and AWS.
According to Foresight News , the SlowMist security team has disclosed a variant of the Shai-Hulud Hades attack affecting the PyPI ecosystem, involving malicious packages openai_mcp-2.41.2 and bramin-0.0.4. These two malicious packages are automatically triggered when the Python interpreter starts via .pth files. They silently download the Bun runtime and then execute a multi-layered obfuscated JavaScript payload, capable of stealing cloud credentials such as GitHub PAT, npm, and AWS, encrypted transmission (RSA-OAEP), persistent persistence, and CI/CD injection. Furthermore, they embed content related to weapons of mass destruction before the malicious code to interfere with AI security scanning. SlowMist confirmed that this attack shares the same RSA public key and infrastructure as the previous Red Hat Cloud Services npm poisoning incident.