Security Experts Want the US and China to Promise Never to Let AI Control Nukes
Related
Will China Resources New Energy complete its merger and reorganization to jointly pursue a Shenzhen Stock Exchange listing? China Government-Enterprise Cooperation Fund responds.
Mars Finance reported on July 8th that China Government-Enterprise Cooperation Investment Fund Co., Ltd. (hereinafter referred to as "China Government-Enterprise Cooperation Fund") recently issued a statement saying that the company has noticed a false report circulating online titled "China Resources New Energy Holdings Co., Ltd. and China Government-Enterprise Cooperation Investment Fund Co., Ltd. Complete Merger and Acquisition to Jointly Pursue Listing on the Shenzhen Stock Exchange." The report is entirely false information and seriously contradicts the company's actual situation. According to China Government-Enterprise Cooperation Fund, since its establishment, all of its business activities have strictly complied with national laws, regulations, and regulatory requirements, and it has never conducted or authorized any entity to conduct any activities mentioned in the aforementioned false report. The company is not currently planning any mergers and acquisitions, restructuring, listing applications, or other capital operations, nor has it formulated any corresponding implementation plans. China Government-Enterprise Cooperation Fund also stated that it reserves the right to pursue legal action against any entity that forges or alters the company's seals, business licenses, or authorization documents, or impersonates the company or its employees to release false information, engage in fraud, or commit any other illegal acts that infringe upon the company's legitimate rights and interests. (Wide Angle Observation)
Security firm Coinspect reports that a wallet vulnerability dating back to 2018 resulted in the theft of $3.14 million last month, with Chinese users' assets at higher risk.
PANews reported on July 5th that security firm Coinspect Security published an article on the X platform stating that through analysis of crypto wallet seeds generated using insecure code since 2018, they discovered thousands of seeds that had been actually used. Last month alone, they found that these wallets had a total of $3.14 million stolen, most of which went unreported. Some funds were concentrated in a single address, exhibiting money laundering patterns. One affected address transferred $2 million out just hours after the alert was issued; it is unclear whether this was for theft. Coinspect warned that users who believe many of their assets remain at risk may be located in China.
Ministry of Human Resources and Social Security: By 2030, the large-scale model of the human resources and social security industry will be mature and complete, and the artificial intelligence application system will be basically sound.
According to Mars Finance, the Ministry of Human Resources and Social Security, the National Development and Reform Commission, the Ministry of Industry and Information Technology, and the National Data Administration recently jointly issued the "Implementation Opinions on Accelerating the Application and Development of 'Artificial Intelligence + Human Resources and Social Security'". A relevant official from the Ministry of Human Resources and Social Security answered reporters' questions regarding the "Implementation Opinions". In terms of promoting the work, a three-step work goal will be achieved within five years. First, building the foundation. Taking this year (2026) as a benchmark, the initial formation of the artificial intelligence application system, standard system, and guarantee system in the human resources and social security sector will be promoted. The infrastructure for "Artificial Intelligence + Human Resources and Social Security" applications will be deployed, a number of high-performance human resources and social security industry large-scale models and intelligent agent applications will be cultivated, and about 20 application scenarios based on human resources and social security industry large-scale models and corresponding high-quality datasets will be created, forming a collaborative development ecosystem of computing power, models, data, and scenario applications. Second, popularization and promotion. By 2027, a number of human resources and social security industry large-scale models and intelligent agents will be widely applied, and about 50 high-value application scenario empowerment paths will be explored, achieving significant results in intelligent development. Third, widespread application. By 2030, high-quality datasets will be effectively supplied, large-scale models for the human resources and social security industry will be mature and complete, and the artificial intelligence application system will be basically sound, forming an innovative landscape where artificial intelligence is widely applied in the human resources and social security sector. (Cailian Press)
Gnosis Pay Security Incident Recap: Vulnerability stemmed from a flaw in signature verification logic; fix completed.
According to Foresight News , Gnosis Pay released a post-incident report on June 1st, disclosing that the root cause of the vulnerability was a flaw in the ERC-1271 signature verification logic within the Zodiac module: the system only reads the contract's return result and does not check whether the call was actually executed successfully. Attackers exploited this flaw to deploy a contract that intentionally failed but still returned a "valid" status, forged authorization, and then withdrew funds from accounts not owned by them. This vulnerability was introduced with Zodiac code version 3.4.0 in October 2023 and was patched on June 5th. The report shows that attackers withdrew approximately $1.5 million from 5,281 wallets, including approximately $641,000 in GNO, approximately $453,000 in EURE, and approximately $399,000 in USDC.e; another approximately $300,000 is locked in inaccessible accounts, and the team is exploring recovery methods. Gnosis Pay stated that it will expand its security team, introduce external audits, broaden the scope of smart contract audits, and has completed a complete product rebuild (v2) to improve its security response capabilities.
Trezor, BitBox warn users about fake hardware wallet security alerts
BitBox said multiple Bitcoin companies appeared to have been targeted through a shared newsletter provider, while Trezor confirmed a breach at its email service.
The Ministry of Industry and Information Technology issued a risk warning regarding the potential security backdoors in the AI programming tool Claude Code.
According to Odaily Odaily, the Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology recently discovered that the AI programming tool Claude Code has a security backdoor vulnerability, which poses a serious threat. Claude Code is an AI programming tool developed by Anthropic, an American company, which can autonomously complete code writing and repair tasks based on text requirements. Due to its built-in monitoring mechanism, it can send sensitive information such as user location and identity to remote servers without the user's consent. The affected Claude Code versions are 2.1.91 to 2.1.196. It is recommended that relevant units and users immediately conduct a comprehensive investigation. For development terminals that have installed the above-mentioned affected versions, they should immediately uninstall or upgrade to the latest secure version that has removed the relevant backdoor code. Strengthen the control of external access permissions and traffic monitoring of development tools within the core business network segment to prevent the unauthorized transmission of sensitive data.