BTC $79,630.59 +1.65%
ETH $2,392.94 +3.31%
BNB $710.58 +1.62%
XRP $1.31 +2.33%
SOL $95.43 +3.04%
TRX $0.3182 -0.17%
DOGE $0.0760 +1.84%
ADA $0.1955 +3.16%
BCH $288.27 +5.43%
LINK $11.46 +3.10%
HYPE $81.90 -3.33%
AAVE $130.91 +0.16%
SUI $0.9129 +1.19%
XLM $0.1645 +1.09%
ZEC $1,299.53 +1.30%
AAPL $355.07 +5.08%
AMZN $272.11 +4.57%
GOOGL $291.55 +3.22%
MSFT $556.79 +4.79%
META $634.41 +1.38%
NVDA $196.81 -3.67%
TSLA $376.31 -0.52%
SNDK $970.49 -10.98%
INTC $56.58 -3.66%
SPCX $132.30 +1.24%
MU $757.98 -9.24%
AMD $465.77 -2.63%
BTC $79,630.59 +1.65%
ETH $2,392.94 +3.31%
BNB $710.58 +1.62%
XRP $1.31 +2.33%
SOL $95.43 +3.04%
TRX $0.3182 -0.17%
DOGE $0.0760 +1.84%
ADA $0.1955 +3.16%
BCH $288.27 +5.43%
LINK $11.46 +3.10%
HYPE $81.90 -3.33%
AAVE $130.91 +0.16%
SUI $0.9129 +1.19%
XLM $0.1645 +1.09%
ZEC $1,299.53 +1.30%
AAPL $355.07 +5.08%
AMZN $272.11 +4.57%
GOOGL $291.55 +3.22%
MSFT $556.79 +4.79%
META $634.41 +1.38%
NVDA $196.81 -3.67%
TSLA $376.31 -0.52%
SNDK $970.49 -10.98%
INTC $56.58 -3.66%
SPCX $132.30 +1.24%
MU $757.98 -9.24%
AMD $465.77 -2.63%

x

All
Article
Flash

first_img A Canadian man was extradited to the United States for hijacking a supercomputer at an American university for mining

According to Decrypt, the U.S. Department of Justice announced on Tuesday that a Canadian man has been extradited to the United States, facing charges of assisting in the intrusion of university computers, stealing login credentials, and secretly mining cryptocurrency.A federal grand jury in the Western District of New York indicted 35-year-old Ryan James Roach, a resident of Saskatchewan, and 41-year-old Mathiew James Stubbings, a resident of Ontario, on charges including conspiracy to obtain and damage protected computer information, obtaining protected computer information, and intentionally damaging protected computers, which could result in a maximum sentence of 10 years in prison and a $250,000 fine.The indictment shows that between June 2016 and December 2019, the two targeted U.S. educational institutions with supercomputers, first researching their cybersecurity weaknesses before executing the intrusions. Once inside the systems, they allegedly deployed malware, stole login credentials, and forced the victims' computers to mine for them.Victims included institutions in New York, Tennessee, North Carolina, and Massachusetts. The two reportedly used virtual private servers registered under false names in multiple countries to send malware and mining programs and store stolen credentials, while also forwarding attacks through other victims' compromised computers to hide their identities.Roach was extradited from Canada on October 28 and was arraigned in Rochester, New York, where he is currently detained awaiting a detention hearing. Extradition proceedings for Stubbings are still ongoing in Canada. This case falls under cryptocurrency hijacking, where attackers use others' computers to mine, leaving the victims to bear the electricity costs and suffer performance degradation. The Department of Justice did not specify the particular cryptocurrencies mined by the two.Google's Threat Intelligence team released a report on Monday stating that attackers are expected to increasingly prioritize LLMjacking over traditional resource thefts like cryptocurrency hijacking, which involves hijacking corporate access to AI models and shifting the billing.

GitBook Security Incident Review: Attack Targeting Trade.xyz, SSO Vulnerability Leads to Production Environment Breach

GitBook released a security incident review on November 2, stating that attackers exploited a vulnerability in its single sign-on process to forge employee login sessions, allowing them to query improperly configured GitHub App authentication information within the organization, access internal code repositories, and obtain Cloudflare API keys, ultimately gaining full production environment permissions through service accounts.GitBook disabled the relevant internal service accounts to cut off the attack within hours, resulting in the platform being offline for approximately 16 hours, and fully restored on November 3 at 11:56 UTC. The attackers remained in the production environment for a total of about 3 hours and 25 minutes. GitBook has rotated all infrastructure and revoked customer keys and API tokens.GitBook stated that current indications show the attack targeted a single customer rather than the platform as a whole, and no other customer content has been found to be tampered with. However, since the attackers could access customer data within the platform, they are treating it as if all customer data may have been exposed, including API tokens, integration keys, session signing keys, assistant Q&A records, and authorized repository permissions for GitHub and GitLab applications. Billing information, passwords, and IP addresses were not affected.GitBook noted that the speed and precision of the attack heavily relied on automation and AI. Slow Mist's Chief Information Security Officer 23pds forwarded the review, stating that the targeted entity was Trade.xyz. Trade.xyz previously indicated that the document anomaly stemmed from an intrusion into GitBook's infrastructure, and there were no signs of their own infrastructure being compromised, and they will migrate away from GitBook within a few days.

Vitalik: The primary task of cryptocurrency companies in the next two years is survival, and security assurance will become a focus

Ethereum co-founder Vitalik Buterin stated in an interview that there has been a concerning trend in the industry's security situation over the past period. Security vulnerabilities and attack incidents at the smart contract level are decreasing, while most major hacking attacks that occurred in the past year and a half have been more focused on the user interface layer and centralized components. Hacking attacks are still ongoing, but the underlying core parts that truly need to be secured are actually improving in security, and the range of infrastructure that can provide high security guarantees is also expanding.Vitalik believes that more and more people have realized that the top priority in the next two years is not to achieve victory, but to ensure their survival, and the entire industry is thinking about how to achieve this goal. He expects that relevant institutions, large trading platforms, custodians, and other financial institutions will also take action as soon as possible. He believes that Binance's previous launch of BNB Chain was a correct decision, as users deploying their business on-chain and executing related operations through smart contracts can also benefit from the high security guarantees provided by on-chain infrastructure, and more institutions will develop in this direction in the future.Vitalik stated that the only real solution is to effectively raise the security level of the entire industry. The range of operations that can be completed securely is expanding, but if someone does not pay attention to security, the efficiency gains may ultimately be used to conduct more and more aggressive business, rather than further enhancing security. He anticipates that if security issues develop to a certain extent, regulatory agencies and industry leaders in various countries will begin to require companies to take on more responsibility and adopt more prudent business strategies. The Ethereum Foundation has been providing support, including writing relevant code and tools, providing quantum-safe signature-related code, and supporting the construction of wallets protected by quantum-safe technology, but users still need to actively be aware of risks and choose to enable these security measures.

Micron pauses its $4.5 billion factory plan in Taoyuan, labor disputes threaten AI storage expansion

According to Bloomberg, due to ongoing labor disputes with employee unions, Micron Technology has essentially suspended its plans to build a new storage chip factory in Taoyuan, Taiwan, with a project investment budget of $3 billion to $4.5 billion, originally scheduled to start production in 2028. Sources indicate that Micron is concerned that the agreement reached with the union may be overturned, and currently only a small amount of site safety maintenance work is being retained, after which construction will be frozen.The dispute arises from employees' demands to share the profit growth brought by the AI boom. The Taoyuan union is requesting that Micron distribute 15% of its operating profits to global employees and hopes to receive a full cash bonus rather than a portion in stock. Although Micron reached an agreement with the larger Taichung union in October, some employees are dissatisfied with the terms of the agreement, and the Taoyuan union is attempting to expand its organization to push for renegotiation.The project was originally planned to produce high-bandwidth memory (HBM) and DRAM using ASML's advanced equipment. Taiwan currently contributes about 60% of Micron's DRAM output and is also an important production base for HBM, employing approximately 15,000 people. Micron responded that the company's existing operations in Taiwan are normal and will ensure business continuity for customers, but did not directly comment on the suspension of the Taoyuan project. Taiwan's economic department stated that the government will assist Micron in resolving differences with the union and promote the implementation of the investment plan.

Baidu open-sourced Wenxin 5.5 Flash, with a total parameter of 280 billion

Baidu has open-sourced the ERNIE-5.5-Flash-Base model weights. Following the release of the ERNIE 4.5 series in June 2025, Baidu has once again open-sourced a large model with hundreds of billions of parameters after approximately 16 months, during which the ERNIE 5.0 and 5.1 versions were not open-sourced. The ERNIE 5.5 Flash focuses on inference efficiency, with a total of 280 billion parameters, activating only 14 billion parameters for each generated token, and using 33.5 trillion tokens for zero pre-training.This model supports a maximum inference context of 1 million tokens. Baidu has redesigned the long text processing mechanism, with 37 out of 43 layers compressing every 128 historical tokens into a single cache record, while the remaining 6 layers retain fine retrieval capabilities for the original content, reducing the memory and computational overhead of long text processing. The official evaluation was conducted in conjunction with DeepSeek-V4-Flash-Base, Tencent Hy3-preview-Base, and Xiaomi MiMo-V2.5-Base, ranking first in 24 out of 30 benchmark tests.What is being opened this time is a pure text Base model that has not undergone intermediate training or post-training, mainly for developers to continue domain fine-tuning, instruction training, and reinforcement learning. Baidu stated that the post-trained ERNIE 5.5 Flash will be released subsequently. The license is stricter than the previous generation; the ERNIE 4.5 used the Apache 2.0 protocol, while 5.5 Flash has switched to a custom license that does not authorize use in the European Union, the United Kingdom, and South Korea; for related products or services that have generated over 50 million dollars in revenue in the past 12 consecutive months, separate written authorization from Baidu must be obtained before commercial use.
app_icon
ChainCatcher Building the Web3 world with innovations.