applications

A security research organization, Claroc, discovered that among the 37,571 online applications created by Grok Build, 35,578 (approximately 94.7%) can be accessed without logging in, with an estimated 650 to 800 of them involving private or sensitive data. The exposed information includes internal corporate documents, medical records, employee information, and plaintext passwords, involving six Fortune 500 companies.Among them, 24 applications were created by employees of Elon Musk's SpaceXSI and X, involving internal sales plans, customer data, and confidential advertising proposals aimed at U.S. federal agencies. Researchers pointed out that Grok application sharing links can be discovered through DNS records, and some applications lack access controls. SpaceXSI has removed the 24 applications related to itself, but applications related to other users are still accessible.

According to Brazilian media Portal do Bitcoin, Ailton de Aquino Santos, the Director of Regulation at the Central Bank of Brazil, stated that about 30% of the applications for licenses from cryptocurrency service providers have issues with registered capital not meeting regulatory requirements, and many applying institutions have not submitted audited financial statements.The Central Bank of Brazil previously announced 120 cryptocurrency license applications, of which 119 are still under review, and 1 has been rejected. According to the new regulations, the minimum capital requirement for cryptocurrency trading and intermediary service providers can reach 37.2 million reais (approximately 7 million USD). Currently, the regulatory authority has not disclosed the list of non-compliant companies, and the 30% non-compliance ratio does not mean that the same proportion of applications will ultimately be rejected.

According to Gelonghui, sources have revealed that Apple is developing a Mac application named Harbor, which can turn computers equipped with Apple chips into private AI inference servers, supporting direct downloading, management, and running of open weight models without the need to upload data to the cloud.The application can also connect two or more compatible Macs via Thunderbolt 5, automatically forming a cluster and integrating unified memory to run large models that exceed the capacity of a single machine or handle more concurrent requests without manual configuration or using the command line. The application is currently in a non-public preview by Claris, a software company under Apple, and the official launch date has not yet been announced.

Binance founder CZ retweeted a warning about a critical vulnerability in Microsoft Paint, stating: "The application cannot protect you from operating system vulnerabilities, please update your operating system immediately."It is reported that Microsoft has disclosed a Windows Paint vulnerability numbered CVE-2026-83844, with a CVSS score of 8.1, affecting versions of Microsoft Paint below 11.2605.91. The vulnerability stems from an out-of-bounds read issue, which could allow an unauthenticated attacker to remotely execute malicious code without user interaction. Microsoft has released a security patch, and there have been no confirmed reports of the vulnerability being actively exploited. CZ uses this to remind users that application layer security measures cannot replace the security updates of the operating system itself, and system and software patches should be installed promptly.

Stablecoin infrastructure company OSL Group (HKEX: 863) and financial technology platform Reap announced a partnership, focusing on daily payments to promote the application of stablecoins in real-world scenarios.This collaboration will combine OSL's accumulation in stablecoin infrastructure, liquidity, and compliant cross-border payment networks with Reap's experience in stablecoin issuance and cross-border payment infrastructure. Together, they will expand the application of stablecoins in personal consumption, corporate payments, expense management, and other real-world scenarios, while exploring the construction of stablecoin ecosystems such as agent payments. Kevin Cui, Executive Director and CEO of OSL Group, stated that OSL and Reap will jointly explore more solutions based on stablecoin infrastructure and application scenarios, bringing more quality products to customers and making compliant stablecoins a natural choice for enterprises and the public in daily consumption and payments.

Coincheck announced that due to a malfunction of the external on-chain analysis service it uses, as of November 5th, 0:04 Japan time, there has been a delay in processing cryptocurrency deposit and withdrawal requests on the platform.To address the malfunction, Coincheck has temporarily stopped accepting new cryptocurrency withdrawal requests and has canceled some withdrawal requests that have not yet been processed. Some requests will be temporarily retained and will be re-evaluated once the system is restored.Coincheck stated that this incident was caused by an external service failure, and there has been no unauthorized access to the platform, nor has there been any security incident affecting user assets. User-held assets remain securely stored. Canceled withdrawal requests have had their corresponding assets returned to the user's Coincheck account balance, while deposit processing delays are still ongoing. The platform will gradually process requests once the relevant systems are restored and will announce the service recovery time separately.

According to Solana's official disclosure, the revenue of Solana ecosystem applications in the third quarter approached 300 million dollars, a 50% increase compared to the second quarter.The trading volume of the spot decentralized exchange reached 19.7 billion dollars, and the market capitalization of stablecoins reached 17.51 billion dollars, setting a new historical high. In addition, the Frontier event of Colosseum received nearly 2,900 project submissions.

According to local reports cited by Livecoins, the application period for licenses for virtual asset service providers (VASP) set by the Central Bank of Brazil ended on October 30. It is expected that 150 to 200 companies would participate, but only about 40 actually submitted applications, including large institutions such as Binance and Itaú.Companies that have applied can continue to operate during the Central Bank's review period. Companies that did not apply must exit the market in an orderly manner within one month from the deadline. The response time for new applications from the Central Bank can take up to two years.

Solana Mobile posted on platform X that a malicious third-party application named "SKR Claim" was submitted to the Solana dApp Store. The attacker unauthorizedly accessed the dApp publishing portal and modified the App Spotlight and Quests interface, which requires users to input their mnemonic phrases.The application was removed about 1 hour after being displayed in the dApp Spotlight and is currently being removed from installed devices. The team has fixed the vulnerability that allowed linking to incompletely published applications and reminded that Solana Mobile will not ask for mnemonic phrases or crypto assets, nor will it require users to connect their wallets to receive airdrops.

Tencent officially launched Buddy One, integrating WorkBuddy, Tencent Docs, Tencent Meeting, Tencent Cloud Drive, and ima into a unified AI office system. After linking accounts, users can directly let WorkBuddy search for information and consolidate data across applications without needing to repeatedly authorize or copy and paste. For example, it can generate new plans by combining meeting minutes from Tencent Meeting, old proposals from Tencent Docs, and the ima knowledge base, along with sources of information.The points system has been unified, and WorkBuddy points can be used interchangeably in Tencent Docs, ima, and Tencent Cloud Drive. Points purchased separately in each application will not be merged. The Buddy One VIP official website currently lists a price of 700 yuan/month, which includes 50,000 universal points per month, 1TB of shared space across products, as well as benefits such as the flagship version of WorkBuddy, the professional version of Tencent Meeting, and the super member Plus of Tencent Docs.At the same time, Tencent Cloud Drive is responsible for providing unified storage. Currently, it mainly implements account linking, cross-application retrieval, and point sharing, while cross-application memory sharing has not yet been launched. WorkBuddy PC version must be upgraded to 5.9.0 or above to use it; account linking is free, but unbinding is not currently supported.

Michael Saylor posted that he believes artificial intelligence (AI) can attack cryptocurrency applications, so there is no reason to hold Bitcoin, just as there is no reason to speak English because AI can attack communication applications.Saylor uses this to refute the viewpoint that directly links AI's ability to attack applications with the value of holding Bitcoin.

According to a report by CryptoSlate, the UK's Financial Conduct Authority (FCA) stated in its latest draft of regulatory guidelines that if a cryptocurrency trading application autonomously selects trading platforms and trading paths based on factors such as price, liquidity, trading costs, or execution speed through algorithms, it may be deemed to be engaging in regulated crypto asset trading arrangement activities and will need to obtain the appropriate license.

On October 23, the General Office of the State Council issued the "Opinions on Adapting to the Development of Artificial Intelligence Technology to Support the Construction of Employment-Friendly Development Models" (Guo Ban Fa [2026] No. 29). The document proposes to adapt to the development of artificial intelligence technology, enhance the positive effects of job creation, empower traditional positions, and mitigate the impact of job replacement.The opinions point out that the role of artificial intelligence should be leveraged to improve the employment environment, enhance occupational safety levels, and improve work quality and efficiency, with priority given to promoting applications in positions with labor shortages and high-risk environments; it is essential to cautiously manage the scope, intensity, and pace of artificial intelligence applications in labor-intensive industries to minimize the impact on workers. The document also encourages enterprises to explore the establishment of an unemployment buffer period system, to inform affected workers in advance during the large-scale promotion of artificial intelligence applications, and to provide support for job transition and transformation.The opinions also outline deployments in areas such as strengthening job creation effects, constructing employment-friendly upgrade paths, enhancing workers' digital literacy and employment capabilities, promoting artificial intelligence-enabled employment policy services, improving workers' rights protection and social security, and perfecting employment monitoring, early warning, and risk response mechanisms. The document is dated October 16, 2026, and is marked for public release.

According to the Korea Herald, global investment bank Barclays plans to cut 5,000 jobs, about 5% of the company's total positions, while expanding the application of artificial intelligence. This includes 1,000 positions already cut in the first half of this year, with 60% of the layoffs coming from support departments such as developers. Barclays CEO Venkat Krishnamurthy stated in a conference call that the company will apply AI on a large scale, and said, "AI is not the cake, but the frosting on the cake."Previously, Barclays announced a cost-cutting plan in February, but some investors reacted negatively to the scale of costs shown in its semi-annual report. Among peers, HSBC is considering cutting up to 20,000 jobs over the next few years, while Standard Chartered plans to reduce support department positions by more than 15% by 2030.

Phoenix Technology reported on October 22 that the latest "Refused Operation Application List" from ByteDance's Doubao Mobile Assistant has increased from 151 to 166 applications, with 22 new applications added.The newly added applications cover categories such as travel and business travel, recruitment and workplace, tools and health, and entertainment, including Didi, Didi Enterprise Edition, Air China, Huazhu Club, Lantu Automobile, related apps from Autohome, 58 City, Zhilian Recruitment, Zhiwukong, Keep, Roborock, Tides, Hikvision, Hupu, Mango TV, WiFi Universal Key, Scan All-in-One, Himalaya, and WorkBuddy within the Tencent ecosystem.This adjustment merges financial-related applications under a unified name and will no longer list them separately. Unlike before, where third-party application authorization was required, Doubao Mobile Assistant has changed to directly restrict operations for financial applications, covering areas such as banking, trust services, payments, internet finance, and credit. When this list was first published last week, it included a total of 151 apps.

According to Cointelegraph, blockchain security company CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by the Indian digital certificate authority eMudhra, cryptocurrency trading bots and exchange applications may still be exposed to related vulnerability risks, and browser fixes may not cover software that uses independent security systems.Peiyu Wang, Senior Director of Digital Asset Security at CertiK, pointed out that attackers could exploit the compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or induce users to approve malicious transactions. However, such attacks also require intercepting or redirecting network traffic, and the compromised certificate authority keys alone cannot expose wallet private keys. Cryptocurrency service operators should update software and certificate trust stores and ensure that applications reject affected certificates.

Italian telecommunications company TIM will collaborate with NVIDIA to provide advanced capabilities for the development and deployment of artificial intelligence applications.

Fortune Protocol officially announces a collaboration with the AI Agent platform X-Agent. The two parties will jointly explore the combination of prediction markets and proactive Personal Agents, promoting the extension of prediction markets from information inquiry tools to personalized, proactive information service scenarios.In this collaboration, Fortune Protocol will provide prediction market scenarios and related market data capabilities, while X-Agent will leverage its advantages in Personal Agent technology and application design to jointly explore how AI Agents can continuously track events of interest to users, identify changes in market probabilities, provide contextual interpretations, and take further actions with user authorization.The two parties will first advance the design of application scenarios and the development of conceptual prototypes, exploring the application potential of prediction markets in the next generation of personal AI Agents and the Agent Economy.

Apple Inc. announced the expansion of App Store review rules to include the regulation of AI-generated non-consensual intimate images. The platform had previously banned pornographic content, and the new rules require developers to proactively prevent and remove AI-generated deepfake content. If effective action is not taken, applications containing such violations will be forcibly removed from the store.The updated Clause 1.2 specifically mentions applications that create AI content and names controversial products such as Grok. Previously, users complained that Grok, a product of xAI, was used to create nude and sexually suggestive deepfake images. Earlier this year, Apple warned xAI that if such content continued to spread, Grok would be removed from the App Store; subsequently, xAI implemented safety measures, and the updated version was approved.The newly added Clause 2.5.19 targets so-called "bait-and-switch" tactics, stating that if developers hide new features or modules outside of the submitted review version, especially harmful features like "de-clothing" that are activated only after approval, they may be removed from both the App Store and the Apple Developer Program. Updates to Section 5 will also extend the ban on applications promoting human trafficking or child exploitation to alternative application distribution channels. Apple stated that when developers violate these guidelines, the related applications will be removed, and the developer's eligibility will be terminated.