imme

NVIDIA announced that CEO Jensen Huang has resigned from his positions as President, Chief Executive Officer, and Board Member effective immediately.In addition, NVIDIA has appointed Colette Kress as the interim Chief Executive Officer while she continues to serve as Executive Vice President and Chief Financial Officer; Harvey C. Jones has been appointed as the company's first Chairman of the Board.

Former U.S. President Trump posted on Truth Social that if Mexico does not immediately stop the migrant caravan passing through the country towards the United States, the U.S. will immediately double tariffs on Mexico.Trump stated that Mexico, the Governor of Texas, and the U.S. Border Patrol and Immigration and Customs Enforcement have been informed of his demands.

Péter Szilágyi, the founder of Dark Bio and former head of the Ethereum Go client (codename Karalabe), stated that individuals holding connected smart devices should immediately remove the network connection of their devices. He suggested unplugging the Ethernet cable and disconnecting from WiFi; if disconnection is not possible, the device should be discarded. Szilágyi mentioned that a storm is coming, and the situation will be unsettling, marking the moment of reckoning for decades of negligence in the Internet of Things. Public records show that he served as the head of Go Ethereum from 2015 to 2025 and is currently establishing a personal health data analysis platform, Dark Bio.

U.S. Republican Senator Kevin Cramer accepted an interview with POLITICO and publicly called for Jensen Huang to resign as CEO of NVIDIA. He believes that Huang's extramarital affair poses a serious potential blackmail risk, especially considering that NVIDIA holds highly sensitive AI chip technology. Cramer stated, "The risk of being blackmailed is just too great; I think he must go."Cramer is a member of the U.S. Senate Banking Committee, which is reviewing several bills aimed at strengthening export controls on advanced AI chips. He believes that while it is certainly possible for NVIDIA's board to initiate an internal investigation, it is far from enough. Earlier that day, Larry Kudlow, the former director of the White House National Economic Council during Trump's first term, also publicly urged on Fox Business, "Mr. Huang, resign now." He believes this is a reasonable action for Jensen Huang to take at this time.As the controversy escalates, the U.S. Congress is also accelerating its scrutiny of NVIDIA's chip exports. The three bills under consideration by the Senate Banking Committee involve strengthening export approvals for advanced chips, tracking the destination of chips, and restricting the export of certain semiconductor manufacturing equipment. These bills are vying to be included in the annual National Defense Authorization Act and have not yet been fully passed.

On November 9, 2026, Google released an emergency stable channel update for the desktop Chrome browser, fixing nine security vulnerabilities, including a zero-day vulnerability that was already being exploited in the wild. This update raises the Chrome version on Windows and Mac platforms to 157.8103.5/.51, and to 157.8103.5 on the Linux platform, and will be gradually rolled out over the next few days to weeks. The core focus of this update is the high-risk vulnerability numbered CVE-2026-125350, which is a use-after-free issue in an XML component. Google explicitly stated in the announcement that "CVE-2026-125350 is known to be exploited in the wild," but did not disclose specific attack methods, the scale of victims, or attribution of the attack activities.The vulnerability was reported by an anonymous researcher on November 6, 2026, just three days before Google released the fix. Among the nine fixes, seven are classified as "high risk" and two as "medium risk." In addition to CVE-2026-125350, another high-risk vulnerability, CVE-2026-125346, also pertains to a use-after-free issue in an XML component, reported by Arni Hardarson of Neonix Security on October 12, 2026, but Google only marked CVE-2026-125350 as an actively exploited vulnerability. The other high-risk vulnerabilities include uninitialized resources in WebGL, improper FileSystem authorization, synthesizer buffer overflow, GPU out-of-bounds write, and V8 type confusion, most of which were discovered by Google's internal security team.Google also confirmed that the Android version of Chrome (157.8103.5) released on the same day includes the same security fixes as the desktop version, with no exceptions noted. Users on the Extended Stable channel should install the update released separately on November 9, with Windows and Mac versions being 156.8078.96, which also lists CVE-2026-125350 as a high-risk fix. The Hong Kong Government Computer Security Incident Coordination Centre (GovCERT.HK) issued a security alert on the same day, defining affected systems as versions prior to Chrome 157.8103.5, and pointed out that successful exploitation of the related vulnerabilities could lead to remote code execution, denial of service, tampering, or bypassing security restrictions. The Hong Kong Computer Security Incident Coordination Centre (HKCERT) rated the risk level of this update as "extremely high risk." Google explained in the announcement that access to vulnerability details and links may remain restricted until most users complete the update. The company recommends that users manually check and trigger the update via "Settings → About Chrome," and restart the browser after completing the update for the patch to take effect. For users still running versions prior to Chrome 157.8103.5, the current priority action is to confirm the version number and restart immediately to complete the upgrade.

According to the official announcement from LNbits, the Lightning Network wallet and account system LNbits has encountered a wave of attacks, urging all users to immediately stop their LNbits servers.LNbits stated that the team needs to push multiple security patches and will take precautionary measures before the patches are released, and will announce further developments as soon as possible.

Binance founder CZ retweeted a warning about a critical vulnerability in Microsoft Paint, stating: "The application cannot protect you from operating system vulnerabilities, please update your operating system immediately."It is reported that Microsoft has disclosed a Windows Paint vulnerability numbered CVE-2026-83844, with a CVSS score of 8.1, affecting versions of Microsoft Paint below 11.2605.91. The vulnerability stems from an out-of-bounds read issue, which could allow an unauthenticated attacker to remotely execute malicious code without user interaction. Microsoft has released a security patch, and there have been no confirmed reports of the vulnerability being actively exploited. CZ uses this to remind users that application layer security measures cannot replace the security updates of the operating system itself, and system and software patches should be installed promptly.

According to Digital Asset, the Financial Services Commission of South Korea announced that it will formulate new guidelines requiring virtual asset service providers to immediately notify the Financial Supervisory Service and the Financial Security Institute upon discovering security incidents. Currently, these companies only need to report to the Korea Internet & Security Agency. Financial authorities believe that as virtual assets become increasingly intertwined with the financial industry, it is necessary to quickly convey incident information to financial regulatory bodies for investigation, information sharing, and consumer protection.Financial authorities also plan to establish the Digital Financial Security Act, which will apply security regulations comparable to the current Electronic Financial Transactions Act to virtual asset service providers, insurance agencies, and the lending industry, which hold a large amount of customer information or could cause significant asset losses. The legislation is planned to be completed and submitted in the first quarter of 2027. In addition, South Korea will conduct comprehensive security inspections of approximately 580 financial companies, including virtual asset service providers.

The open-source Bitcoin payment processing tool BTCPay Server has received multiple reports of unauthorized fund theft from its Bitcoin and Litecoin hot wallets on the platform. The project team released an investigation update confirming that the attack targeted servers running BTCPay Server version 2.4.1 or earlier. The attackers exploited a vulnerability that was fixed in version 2.4.2 on August 7, gaining administrative access to the servers through various methods and draining the hot wallet funds.BTCPay Server founder Nicolas Dorier confirmed that only servers running versions prior to 2.4.2, particularly version 2.4.1, were affected; users running the latest version 2.4.7 have not reported any credible losses. Some affected service providers, including LunaNode, have automatically shut down at-risk older instances. The official recommendation for users still using version 2.4.1 or earlier is to immediately transfer any remaining funds in old hot wallets to a new wallet created with a completely new mnemonic, take the old server offline while retaining relevant logs, and then install the latest version on a new virtual machine and connect the new wallet, ensuring not to restore the old server entirely to the new machine.Simply updating the software version is not enough to eliminate the risk, as attackers may have gained persistent access to the old server. Funds stored outside the server, such as those in hardware wallets, were not affected by this incident. The vulnerability is related to a flaw fixed in August of this year, when attackers had manipulated nodes by obtaining LND administrative credentials. As of now, this vulnerability has not been assigned a CVE number and is not listed in CISA's known exploited vulnerabilities catalog.

According to the Financial Times of the UK, U.S. President Trump stated that there are currently no immediate plans to strike Iran. He downplayed speculation about preparations to escalate the conflict with Iran after the midterm elections. In an interview with the Financial Times on Tuesday local time, Trump hinted that he is satisfied with the current stalemate with Iran, while also stating that he is prepared for further military action if necessary.In a phone interview lasting about six minutes, Trump said, "It seems we are getting everything we want." When asked about Israeli Prime Minister Netanyahu's strong hints that an attack would be launched later this week, Trump said, "I am ready, we are ready. If action is needed, we can strike at any time, but perhaps it is not necessary to do so at all."Trump also mentioned that energy prices will drop significantly after the midterm elections, and that there is currently more oil passing through the Strait of Hormuz than before the war, while the U.S. blockade of Iranian ports is successfully choking Tehran's economy. He said, "This is a great situation." Trump emphasized that he would not share any attack plans in advance but stated that indirect negotiations with Iran regarding nuclear issues are still ongoing.

Hifi Finance disclosed that Hifi DAO has encountered a governance takeover attack, and HIFI token holders are effectively unable to control the protocol, governance smart contracts, and HIFI token supply. The team urges all users with collateral in the Hifi Protocol to withdraw immediately and specifically requests the controllers of the two relevant addresses to withdraw WETH from the protocol.Hifi Finance stated that the core team failed to detect and prevent this governance attack in a timely manner and takes full responsibility for it. The team has now taken measures to significantly limit the impact of the attack, and the final losses are yet to be determined, with preliminary estimates around $20,000. The DAO has sufficient funds to compensate all affected parties; the DAO's own liquidity has been permanently withdrawn from decentralized trading platforms.Additionally, all outstanding debts collateralized by RWA will be directly managed by the core team and will no longer be processed through the compromised smart contracts. The relevant debts still have ample capital support and are expected to be fully repaid by the original due date of March 26, 2027, with no new debts being issued by the protocol. The team stated that a complete investigation report will be released subsequently.

According to a report by the Economic Daily, Apple's first foldable device, the iPhone Duo, quickly sold out after its launch on October 23 on the official website and major channels, with all models sold out on the same day. The second wave of shipments is expected to arrive on January 22, 2027. Supply chain sources indicate that Apple has requested its partners to expedite production and increase orders by 30%, with optimism surrounding Hon Hai, TSMC, and New Kinpo Group benefiting from this.The report states that scalper prices once reached NT$100,000, a premium of about 33% over the minimum entry price of NT$74,900. Industry insiders noted that the initial stock was insufficient, affected by assembly yield rates and demand exceeding Apple's expectations. Market research firms originally anticipated a stock volume of only 6 million units this year, which was later revised up to 8 million to 10 million units, with shipments expected to reach 33 million units by 2027, and it is estimated that it could capture about 40% of the global foldable device market next year.Supply chain sources indicate that the complete assembly is exclusively handled by Hon Hai, the core processor chips are manufactured by TSMC, and key bearing components are supplied by a joint venture between Hon Hai and New Kinpo Group, with Amphenol as the second supplier. The industry believes that insufficient production capacity is mainly limited by bearing capacity and the difficulty of complete assembly. The above content is a summary of supply chain and market research estimates and is not an official announcement from Apple.

The Bitcoin wallet Electrum officially announced the release of version 4.8.3, stating that this update fixes a serious security issue and urges all users to upgrade. The official statement indicates that detailed information about the vulnerability will be released later.Its GitHub changelog marks 4.8.3 as a security update, with a release date of October 23. The Electrum official website reminds users to only download the software from the official website and to verify the GPG digital signature to confirm the source and integrity of the installation package.

According to EmberCN monitoring, the trader "Salem1299534" liquidated their holdings of 20.06 million AI approximately 2 hours ago, exchanging them for 461 ETH, worth about 1.09 million USD. This sell-off caused the AI price to drop 15% instantly.The trader previously invested about 980,000 USD to buy AI and ultimately sold it for approximately 3.12 million USD, realizing a total profit of about 2.14 million USD.

Cryptocurrency exchange Coinbase stated that its custody holds about 5% of the total existing Bitcoin and urged Bitcoin developers to immediately address the threat of quantum computing. Coinbase pointed out that changes to Bitcoin consensus and ecological migration may take years and cannot wait until quantum computers capable of breaking signatures appear.Coinbase suggested adopting a flexible "container" design similar to BIP-360 to gradually replace quantum-resistant signature systems; it also proposed a phased implementation of a "1-of-2" scheme, allowing the same funds to be spent during the transition period using either traditional keys or quantum-resistant keys. This scheme also needs to be compatible with multi-party computation (MPC) key splitting mechanisms. Coinbase stated that dormant, lost, and Bitcoin held from the Satoshi era are separate governance issues, and any rescue mechanism itself must also possess quantum resistance. In January of this year, Coinbase established a quantum advisory council; in July, it joined the Bitcoin Security Alliance with BlackRock and Strategy, committing a total of $15 million for Bitcoin's quantum-resistant transformation.

According to on-chain analyst Onchain Lens (@OnchainLens), a newly created wallet received 110,000 HYPE (approximately 9.73 million USD) from another wallet and immediately staked all the tokens after receiving them.

According to the South China Morning Post, former U.S. officials stated that Chinese semiconductor factories have stockpiled hundreds of immersion lithography machines worth billions of dollars in recent years and urged Washington and its allies to stop further exports. The Centre for Technology & Statecraft, established in August 2026, released a report in late September estimating that by early 2026, Chinese wafer fabs had acquired approximately 343 immersion deep ultraviolet lithography systems. The report was co-authored by former U.S. export control official Nicholas Brown and former White House and Department of Commerce technology policy advisor Saif Khan.The report estimates that about 270 of these are ASML Twinscan NXT:1980i. The authors claim that although these devices lag behind extreme ultraviolet lithography machines, they can be modified for the production of 7-nanometer logic chips and advanced memory required for artificial intelligence processors (including Huawei's Ascend series). Chinese wafer fabs spent over $13 billion in 2024 to purchase about 90 NXT:1980i units, and acquired another 89 units in 2025. ASML disclosed that, by destination, China accounted for 41% of its net system sales in 2024, 33% in 2025, dropping to 19% in the first quarter of 2026 and 14% in the second quarter.Since September 2023, the Netherlands has required export licenses for the NXT:2000i and more advanced immersion deep ultraviolet equipment, effectively banning these models from being shipped to China; a year later, the licensing requirements were extended to the NXT:1980i, but this model can still be approved for shipment on a case-by-case basis.

The Core Lightning team, which develops the open-source Bitcoin Lightning Network node software, has issued an urgent alert stating that reports indicate attackers are targeting nodes that have not installed patches, urging operators still running old versions to upgrade immediately. The team stated: "Emergency security update: If you are using version 26.06.7 or earlier, please upgrade to the latest release as soon as possible."Prior to this, Core Lightning began investigating a potential issue that could affect its experimental features and, in turn, impact user funds on September 16, and approximately six days later, version 26.06.8 was released. This update not only fixed several defects but also provided patches for security vulnerabilities reported responsibly by multiple parties, thanking the Bitcoin Red Team and 12 other individuals and organizations in the release notes, while also acknowledging anonymous reporters.According to the changelog, this round of fixes covers a bug that could cause sender nodes to crash, requests that could exhaust REST interface memory, and a vulnerability that could result in user funds facing confiscation losses when closing payment channels. To provide operators with ample upgrade windows and prevent attackers from taking advantage of reverse engineering and exploitation, this version intentionally obscured some testing content. Additionally, in August of this year, the project initiated a collaborative fixing process after reviewing a large number of AI-generated general vulnerability disclosure reports, and two days later released version 26.06.7 to close confirmed vulnerabilities.

The core provisions of the regulatory framework for payment stablecoins in Florida, USA, will take effect on October 1, 2026.According to the state's Bill 2026 Chapter 176, engaging in the business of qualified payment stablecoin issuers in the state generally requires a license or must meet exemption conditions; qualified issuers must maintain at least a 1:1 identifiable reserve, which includes cash, funds in Federal Reserve accounts, qualified bank deposits, U.S. Treasury securities with a remaining maturity of no more than 93 days, and qualified government money market funds, among others. They must also publicly disclose redemption policies, disclose reserve composition monthly, accept monthly audits by certified public accountants, and be certified by the CEO and CFO.If the total issuance of payment stablecoins by state-level issuers reaches $10 billion, unless a federal exemption is obtained, they must transition to the corresponding federal regulatory framework within 360 days or suspend new issuances until the scale falls below the threshold.

According to Quit monitoring, the Payment Processor V2 (PPV2) vulnerability attack is still ongoing. Even if users are not affected by the incident, as long as the relevant authorization has not been revoked, assets may still be at risk, and it is recommended to revoke the authorization immediately.About 1 hour ago, a certain address lost 0.15246 WETH in the next block after accepting a quote and receiving funds. The attacker paid 99% of it as a tip to Titan Builder, keeping only about 0.0015 ETH, which is almost impossible to recover through front-running. Quit suggests that OpenSea should check whether there are still risk authorizations before users accept quotes and require users to revoke them first; when transferring NFTs, it should also check whether the receiving address has relevant authorizations left.