cyber

Blockchain infrastructure service provider Chainstack disclosed that it experienced an AI-driven cyber attack from October 26 to 31, 2026. The attacker accessed the development environment through an unmodified default administrator credential and a Grafana instance without single sign-on protection, subsequently gaining cluster administrator privileges via an unauthenticated MCP tool server and stealing credentials through an automated platform, ultimately accessing the production environment to read the customer database.This incident resulted in the exposure of customer account information, including organization names, account holder names, member email addresses, and password hashes. The attacker also had access to systems containing node credentials, although there is no evidence that they were read; however, Chainstack still urged customers to rotate their node credentials. Chainstack stated that customer-facing services operated normally during the incident, and customer nodes, consoles, and APIs were not modified. Investigations revealed that the attacker used the open-source framework ARTEX, with no evidence found of exploiting software vulnerabilities. Chainstack has cut off the attack access path and requested customers to change passwords, rotate node credentials, regenerate platform API keys, and remain vigilant against phishing information.

Elon Musk stated that in order to process more Cybertruck backlog orders, production will be extended until the end of summer 2027.

According to Catcher Predict monitoring, in the market prediction event on Polymarket "Dota 2: Froglings vs CyberHero (BO3) - 1win Essence Play-in Group A", the sub-market "Ends During the Day" option's win rate has experienced a sharp fluctuation, soaring from 50% an hour ago to the current 90% (a fluctuation of 40%). Please note the impact of related breaking news.

The National Internet Information Office of China has launched the "Internet New Technology and New Application Information Service Filing System," which can integrate the filing of new technologies and applications such as generative artificial intelligence, algorithms, deep synthesis, and blockchain. The system officially went live on November 9, and the original "Internet Information Service Algorithm Filing System" and "Blockchain Information Service Filing Management System" have been simultaneously discontinued.

Elon Musk stated that he will try to produce more Cybertrucks before shutting down the production line, but will have to refund deposits to many people.

Elon Musk stated that the order backlog for the Tesla Cybertruck currently far exceeds production capacity. It is expected that the existing production line will be dismantled to expand the Cybercab production line in June or July next year.

Tesla (TSLA.O) announced that it will add an additional shift to strive to complete all Cybercab orders on time.

Elon Musk stated that Tesla plans to gradually reduce Cybertruck production at its Texas factory starting in mid-2027 to expand the production of Cybercab.Tesla began producing Cybertruck at its Austin factory in 2023, but market demand has been poor. Tesla has been producing the golden two-seater Cybercab at the Austin factory as an important part of its transformation plan.

Tesla (TSLA.O) has raised the price of the Cybertruck Cyberbeast model in the U.S. market to $102,490.

Elon Musk stated that Tesla (TSLA.O) will gradually stop the production of the Cybertruck at its Texas Gigafactory around mid-next year to make room for increased production of the Cybercab.

OpenAI announced the release of GPT-6 Cyber.

India's CERT-In stated that an attack activity named CRAFTY FALCON is escalating, with attackers stealing cryptocurrency wallet keys and transferring funds.

According to IT Home citing The Information, OpenAI may release the next generation of Astra and Sol series models, as well as the Cyber model aimed at the cybersecurity field, as early as November 6 (Friday) local time. The report did not disclose specific model numbers, pricing, context window lengths, or benchmark scores, nor is it clear whether these models will be launched first through API, ChatGPT, Codex, or partner channels.Previously, users had discovered the "gpt-6.2-astra" label in Codex usage statistics. Users suspected to be participating in the gray testing claimed that the new model has improvements in physical effects and animation generation, but these feedbacks are mainly based on subjective experiences, and there is currently no public benchmark data to verify.

According to Bloomberg Law, citing informed sources, Binance has failed to obtain cybersecurity insurance. Following the hacker attack involving approximately $6.3 billion in stolen assets, it is expected that the losses covered by external commercial insurance will be limited.Binance currently holds directors and officers liability insurance, which may provide some protection against regulatory investigations and lawsuits targeting the company's directors or executives after the incident, but it does not directly cover the stolen cryptocurrency assets. According to the report, digital asset companies, even if they hold relevant insurance, may be subject to exclusions in the policy, and the specific compensation scope still depends on the policy terms.

Binance co-founder He Yi stated that since 2026, the Binance security team has identified and successfully intercepted 57 suspected cyber attack incidents related to North Korea. These attacks reflect the ongoing threat posed by state-sponsored hacker organizations targeting the cryptocurrency industry.The related attack methods include fake job interviews, malware disguised as popular development tools, compromised software packages and browser extensions, fake video conferencing applications, and social engineering attacks aimed at stealing account credentials or deploying remote access malware.He Yi mentioned that Binance has intercepted many of these attacks, but even if one is not successfully intercepted, the consequences can be very serious, "This kind of thing should not happen."

According to Binance's official disclosure, the security incident on October 29 involved approximately $6.34 billion in digital assets. As of the report's release, about $2.85 billion in assets had been frozen or intercepted, with amounts pending verification and affected by market price fluctuations.Binance's preliminary investigation stated that the attackers infiltrated employee devices through fake job interviews and malicious software downloads, subsequently using internal AI tools and stolen credentials to access wallet signature services, bypassing normal withdrawal processes to initiate transactions. The attackers also exploited the Ethereum EIP-7702 authorization mechanism, allowing the malicious contract to gain partial execution rights over the hot wallet.Binance stated that the company will bear the financial impact of the stolen funds; as of October 31, 98% of the affected token assets have been replenished, while the remaining assets with lower liquidity are still being purchased. The company has closed the identified attack vectors and is hiring independent security experts for further review.

According to a report by Reuters, South Korean President Lee Jae-myung mentioned the recent theft of billions of dollars in cryptocurrency assets from Binance during a State Council meeting on November 3, calling for the establishment of a strong intergovernmental cybersecurity coordination agency to oversee security measures in both the public and private sectors.Lee Jae-myung stated that as AI drives increasingly complex hacking techniques, the existing security system, which primarily focuses on post-incident checks and responses, has shown significant limitations, and a proactive prevention mechanism must be established. The National Intelligence Service of South Korea has currently launched emergency security checks on over 2,100 central and local government departments and public institutions. Previously, the FBI in the United States attributed the Binance theft incident to North Korean hackers, but North Korea has denied involvement.

Beget indicates that its infrastructure has suffered a large-scale cyber attack, resulting in partial service interruptions. The full recovery time is currently undetermined.

The Chief Executive Officer of the Hong Kong Securities and Futures Commission, Ashley Alder, stated at the Hong Kong FinTech Week 2026 that the Hong Kong Securities and Futures Commission plans to establish a cybersecurity framework for licensed institutions and impose higher requirements on higher-risk institutions to enhance their ability to withstand AI-driven cyber threats.Alder also mentioned that Hong Kong institutions are at the forefront of tokenization, and tokenization must bring substantial economic benefits to the market in order to achieve scalable development.

IT Home reported on October 30 that developers discovered application entry points and interface logic related to the Cyber cybersecurity model in the front-end code of the DeepSeek official website. The application page route points to /usage/model-application and has a feature gate switch set; accounts without permission will be redirected back to the usage page when accessed. The code also includes interfaces related to Cyber Key creation and quota management.The models in the code are identified as cyber-personal-v3 and cyber-enterprise-v4. The personal version is aimed at individual security practitioners, requiring the submission of ID information and completion of facial verification; the enterprise version is aimed at corporate entities, requiring not only real-name materials but also a business license and authorization letter. Common thresholds for both channels include that the account has completed real-name verification and is in normal status, registered in mainland China and bound to a mainland mobile number, and has no violation records in the past 90 days.The application process involves filling out an application form and submitting it for review. After passing the review, a Cyber Key is created. Currently, this entry point does not appear in the public menu of DeepSeek and is in a gray testing state. Some users have reported that only accounts covered by the gray test can see the relevant sections on the usage page, and when permissions are granted, the "DeepSeek Flash Cyber Cybersecurity Dedicated API" area will be displayed. As of the time of reporting, DeepSeek has not yet released an official announcement regarding this model; the information comes from observations of the official website's JavaScript code and feedback from gray test users.