News Heat Trend
Project Overview
Cyber is a restaked Ethereum Layer 2 designed for social and optimized for mass adoption. It serves as the social layer for web3 applications and the gateway for the next wave of users to access web3 experiences, tools and financial liquidity across all Layer 2 ecosystems.
UK cybersecurity startup Cytix completes 6 million euro Series A funding round
According to EU-Startups, UK cybersecurity startup Cytix announced the completion of a 6 million euro (approximately 7 million USD) Series A funding round, led by UK venture capital firm Northern Gritstone, with participation from existing investors Auriga Cyber Ventures and NPIF II – PXN Equity Finance. Founded in 2020, Cytix focuses on addressing software change security risks arising from AI-assisted development, agent workflows, and continuous delivery, and its change risk management platform helps enterprises identify high-risk changes and take corresponding measures.
AI personal assistant company Pally completes $5.2 million in funding, led by Cyber Fund and Y Combinator
Odaily Odaily News: AI personal assistant startup Pally has announced the completion of a $5.2 million funding round, led by Cyber Fund and Y Combinator, with participation from Pioneer Fund, Founders Inc, 468 Capital, and angel investors. The company is valued at $30 million and primarily provides AI personal assistant services through an SMS interface. Pally was launched in 2025, with its latest version released in June, and can sync with platforms such as Gmail, Outlook, Slack, Granola, and Notion. After user authorization, Pally can book flights, manage inboxes, reply to messages, and reserve restaurant tables. Pally uses Anthropic's Claude, OpenAI's ChatGPT, as well as open-source models such as Kimi K3 and GLM 5.2. Co-founder Haz Hubble stated that the company will not sell user data or use related data to train models. (Business Insider)
Pakistan's Federal Investigation Agency (FIA) Establishes Cryptocurrency Investigation Unit to Combat Money Laundering and Terrorist Financing
the Federal Investigation Agency (FIA) of Pakistan has established a cryptocurrency investigation unit within its newly inaugurated National Command and Control Center (NC3) to probe money laundering and terrorist financing activities conducted through virtual currencies.Dr. Muhammad Athar Waheed, head of the FIA's Counter-Terrorism Department, stated that the new unit will investigate the criminal use of cryptocurrencies. The newly formed Pakistan Virtual Asset Regulatory Authority (PVARA) will be responsible for overseeing digital assets. Dr. Waheed also urged the National Cyber Crimes Investigation Agency and the Anti-Narcotics Force to establish similar departments to address the use of cryptocurrencies in cybercrime and drug trafficking.The NC3 integrates the FIA's financial crime tools onto a single platform, including anti-money laundering and virtual currency investigation units, an Interpol coordination point, open-source intelligence, cyber patrolling, and dark web investigation departments. Pakistan previously lifted its eight-year ban on cryptocurrency banking, created the PVARA, and is advancing the licensing of cryptocurrency exchanges. (Decrypt)
Post-quantum cryptography security company QIZ Security completes $17 million seed funding round
According to PR Newswire, post-quantum cryptography (PQC) management platform QIZ Security announced the completion of a $17 million seed funding round, led by Bessemer Venture Partners and Merlin Ventures, with participation from Evolution Equity Partners, Qbeat Ventures, Singtel Innov8, and Qino Cyber Capital. The funding will be used to accelerate product development and market expansion. QIZ's core capabilities lie in providing enterprises with continuous crypto asset discovery, risk modeling, and remediation governance, helping organizations complete the migration to quantum-safe architecture before "Q-Day" (the point in time when quantum computers are expected to possess the capability to break existing encryption systems, anticipated around 2029) arrives. Currently, QIZ has established strategic partnerships with Cisco, AWS, Google, CrowdStrike, Deloitte, EY, and IBM, among others, with services covering the finance, telecommunications, healthcare, and critical infrastructure sectors. The company was co-founded by cybersecurity industry veterans Ben Volkow, Lenny Ridel, and former head of Deloitte's Global Quantum Cybersecurity team, Dr. Itan Barmes.
The EU Cyber Resilience Act officially takes effect, requiring crypto wallet vendors to report vulnerabilities within 24 hours.
According to Cointelegraph, the EU Cyber Resilience Act (CRA) officially entered into force, requiring cryptocurrency hardware and software wallet providers to submit an early warning within 24 hours of discovering a serious security vulnerability or an actively exploited vulnerability, a complete notification within 72 hours, and a final report within 14 days after remediation measures are implemented. The regulation applies to all "products with digital elements" sold in the EU market. Violating companies face administrative fines of up to €15 million (approximately $17.3 million) or 2.5% of their global annual turnover, whichever is higher; providing false or misleading information will result in an additional fine of up to €5 million. Previously, Trezor and BitBox have both disclosed user data breach incidents and warned users to be vigilant against phishing emails disguised as security notifications.
EU's Cyber Resilience Act Takes Effect: Crypto Wallet Vulnerabilities Must Be Reported Within 24 Hours
The EU's Cyber Resilience Act has taken effect. Cryptocurrency hardware and software wallet providers must submit an initial early warning within 24 hours after discovering actively exploited vulnerabilities or severe security flaws in their products, and submit a full notification within 72 hours.Manufacturers must submit a final report within 14 days after corrective or mitigating measures become available; serious incidents must be reported within one month. Companies that violate the relevant regulations may face fines of up to €15 million or 2.5% of global annual turnover, whichever is higher; providing false, incomplete, or misleading information may result in fines of up to €5 million. (Cointelegraph)
Canadian financial regulatory authority: Tokenized deposits have the same legal status as traditional deposits
According to a statement issued by the Office of the Superintendent of Financial Institutions (OSFI) on September 10, 2026, OSFI clarified its technology-neutral position, stating that tokenized and other digital deposits are legally indistinguishable from traditional deposits, and that the underlying technology of a financial product or service does not determine its legal nature. OSFI requires financial institutions to ensure that innovation activities (including those conducted by third parties on their behalf) comply with applicable laws and regulations, and to adhere to guidelines such as B-13 Technology and Cyber Risk Management and B-10 Third-Party Risk Management. Prior to launching any new products or services, financial institutions must communicate in advance with OSFI supervisors and seek legal advice when necessary.
Chainalysis "Operation Lighthouse" Investigates Over 29,000 Crypto Addresses Linked to CSAM Networks Across 125 Countries
According to Bitcoin.com, blockchain analytics firm Chainalysis announced the results of Operation Lighthouse on August 25. This transnational operation targeted criminal networks associated with child sexual abuse material (CSAM), investigating 29,120 cryptocurrency addresses and digital identifiers across more than 100 clearnet and darknet platforms, forums, and distribution networks. The effort generated 14,300 investigation leads and uncovered over 7,700 suspicious accounts and linked suspects spanning 125 countries. Coordinated in New York by the National Cyber Forensics & Training Alliance (NCFTA), the initiative involved at least nine law enforcement agencies, along with more than 13 private organizations and non-profits, including Europol, the Australian Federal Police, the Royal Canadian Mounted Police, and the UK’s National Crime Agency. Chainalysis stated that the discovered leads could subsequently result in account restrictions, arrests, and prosecutions. Law enforcement outcomes are expected to continue through 2027, and the company plans to extend this collaborative model to other types of crypto-related crime.
Chainalysis partners with Binance, Coinbase, and others to launch Operation Lighthouse targeting child sexual abuse material networks
According to CoinDesk, blockchain analytics firm Chainalysis stated that it organized the multi-day joint operation "Operation Beacon" in collaboration with crypto firms such as Binance and Coinbase, as well as law enforcement agencies from multiple countries, to investigate networks spreading child sexual abuse material using cryptocurrency. The operation is headquartered at the National Cyber-Forensics and Training Alliance in New York, with participating agencies including Europol, the Australian Federal Police, the Royal Canadian Mounted Police, and the UK's National Crime Agency.
South Korea Gwangju Police Solve Virtual Asset Fraud Case, 3 Suspects Arrested
According to Yonhap News Agency, the Gwangju Police Agency's Cyber Crime Investigation Team has arrested and referred three suspects, led by A (in their 60s), suspected of establishing offices in Seoul, Gwangju (Jeollanam-do), Gunsan (Jeollabuk-do), and other locations since November 2024, and using false promises such as "principal guarantee" and "potential returns of billions of Korean won" to lure over 100 elderly individuals aged 70 to 80 into investing in virtual assets, defrauding them of a total of approximately 500 million Korean won. The police stated that there are expected to be victims yet to be revealed, are currently continuing to expand the investigation, and reminded the public to remain vigilant against investment offers promising principal protection and high returns.
The EU Cyber Resilience Act officially takes effect, requiring crypto wallet vendors to report vulnerabilities within 24 hours.
According to Cointelegraph, the EU Cyber Resilience Act (CRA) officially entered into force, requiring cryptocurrency hardware and software wallet providers to submit an early warning within 24 hours of discovering a serious security vulnerability or an actively exploited vulnerability, a complete notification within 72 hours, and a final report within 14 days after remediation measures are implemented. The regulation applies to all "products with digital elements" sold in the EU market. Violating companies face administrative fines of up to €15 million (approximately $17.3 million) or 2.5% of their global annual turnover, whichever is higher; providing false or misleading information will result in an additional fine of up to €5 million. Previously, Trezor and BitBox have both disclosed user data breach incidents and warned users to be vigilant against phishing emails disguised as security notifications.
EU's Cyber Resilience Act Takes Effect: Crypto Wallet Vulnerabilities Must Be Reported Within 24 Hours
The EU's Cyber Resilience Act has taken effect. Cryptocurrency hardware and software wallet providers must submit an initial early warning within 24 hours after discovering actively exploited vulnerabilities or severe security flaws in their products, and submit a full notification within 72 hours.Manufacturers must submit a final report within 14 days after corrective or mitigating measures become available; serious incidents must be reported within one month. Companies that violate the relevant regulations may face fines of up to €15 million or 2.5% of global annual turnover, whichever is higher; providing false, incomplete, or misleading information may result in fines of up to €5 million. (Cointelegraph)
U.S. Department of Justice Sues 17 Iranians Accused of Conducting Large-Scale Cyber Espionage Campaign on Behalf of Revolutionary Guards
The U.S. Department of Justice announced an indictment charging 17 members of Iran's Mabna Institute with long-running cyber intrusion campaigns targeting 144 U.S. universities, 178 foreign universities, at least 42 U.S. companies, 11 foreign companies, and multiple government and non-governmental agencies, resulting in the theft of more than 31 TB of academic data, intellectual property, and sensitive information. The indictment alleges that the group has conducted hacking operations under contract from the Islamic Revolutionary Guard Corps (IRGC) and other Iranian government and university entities since 2013, profiting by compromising accounts, stealing research materials and proprietary data, and selling portions of the illicitly acquired resources. Some individuals involved also participated in the HBO hacking incident, where internal data was exfiltrated and attempts were made to extort approximately $6 million in Bitcoin.
Hackers Exploit macOS Screen Sharing Vulnerability to Gain Root Access and Mine Monero
Odaily News: The Dutch National Cyber Security Centre (NCSC) has reported that attackers are exploiting a vulnerability in Apple's macOS Screen Sharing feature to take control of devices and install Monero mining programs. Multiple systems with port 5900 exposed to the internet have been compromised, with attackers gaining root access. The vulnerability, tracked as CVE-2026-65400, has a severity score of 7.1 out of 10. It stems from a state management error in the authentication process, allowing remote attackers to bypass login verification without valid credentials. Public proof-of-concept code has already been circulated. Apple has addressed the issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. The NCSC advises users to update their systems promptly and avoid exposing the Screen Sharing service directly to the internet. (Decrypt)
OpenAI Expands Cybersecurity Service Daybreak, Launches Specialized Model GPT-5.6-Cyber
According to TechCrunch, in response to the growing number of AI-driven cyber attacks, OpenAI announced this week the expansion of its cyber defense service Daybreak and the launch of a new cybersecurity-specific model, GPT-5.6-Cyber. Daybreak has added two service tiers: Blue and Red. Blue targets most enterprises, providing basic defense capabilities such as incident response, malware analysis, and patch verification; Red targets advanced users, providing security testing and vulnerability research tools. GPT-5.6-Cyber is available exclusively at this tier, with access currently limited to trusted partners such as Accenture, IBM, CrowdStrike, and Cloudflare.
Bitcoin Red Team Founder Forced to Switch to Chinese Open-Source AI Models Due to OpenAI Access Restrictions
According to Cointelegraph, AnchorWatch CEO and Bitcoin Red Team founder Rob Hamilton stated that after integrating OpenAI Trust & Cyber capabilities into the Bitcoin Red Team's security research work, he faced access restrictions the next day and was forced to switch back to using Chinese open-source AI models to continue research. The Bitcoin Red Team has currently discovered 1,288 critical and high-risk vulnerabilities in the Bitcoin ecosystem, and research work significantly accelerated after the Coldcard hardware wallet was hacked (over $100 million in Bitcoin stolen). Hamilton commented on this: "Black-hat hackers face no restrictions, while white-hat researchers dedicated to reducing risk are excluded."
Canadian financial regulatory authority: Tokenized deposits have the same legal status as traditional deposits
According to a statement issued by the Office of the Superintendent of Financial Institutions (OSFI) on September 10, 2026, OSFI clarified its technology-neutral position, stating that tokenized and other digital deposits are legally indistinguishable from traditional deposits, and that the underlying technology of a financial product or service does not determine its legal nature. OSFI requires financial institutions to ensure that innovation activities (including those conducted by third parties on their behalf) comply with applicable laws and regulations, and to adhere to guidelines such as B-13 Technology and Cyber Risk Management and B-10 Third-Party Risk Management. Prior to launching any new products or services, financial institutions must communicate in advance with OSFI supervisors and seek legal advice when necessary.
Hackers Exploit macOS Screen Sharing Vulnerability to Gain Root Access and Mine Monero
Odaily News: The Dutch National Cyber Security Centre (NCSC) has reported that attackers are exploiting a vulnerability in Apple's macOS Screen Sharing feature to take control of devices and install Monero mining programs. Multiple systems with port 5900 exposed to the internet have been compromised, with attackers gaining root access. The vulnerability, tracked as CVE-2026-65400, has a severity score of 7.1 out of 10. It stems from a state management error in the authentication process, allowing remote attackers to bypass login verification without valid credentials. Public proof-of-concept code has already been circulated. Apple has addressed the issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. The NCSC advises users to update their systems promptly and avoid exposing the Screen Sharing service directly to the internet. (Decrypt)
Singapore Authorities Warn of Cryptocurrency Fake Recruitment Scams, Resulting in $11.8 Million Losses
According to CNA, the Singapore Police Force (SPF) and the Cyber Security Agency (CSA) jointly issued a warning on August 14 that a cryptocurrency scam utilizing fake recruitment has caused losses of approximately US$11.8 million. Scammers impersonated recruiters from cryptocurrency companies, communicated with victims via emails from spoofed domains, and induced them to download malware onto company devices under the pretext of technical programming tests. The malware stole victims' session tokens, bypassed multi-factor authentication to infiltrate their Bitbucket code repositories, then tampered with automated deployment instructions and remotely accessed internal servers, ultimately bypassing transaction approval mechanisms to complete cryptocurrency transfers.
AI personal assistant company Pally completes $5.2 million in funding, led by Cyber Fund and Y Combinator
Odaily Odaily News: AI personal assistant startup Pally has announced the completion of a $5.2 million funding round, led by Cyber Fund and Y Combinator, with participation from Pioneer Fund, Founders Inc, 468 Capital, and angel investors. The company is valued at $30 million and primarily provides AI personal assistant services through an SMS interface. Pally was launched in 2025, with its latest version released in June, and can sync with platforms such as Gmail, Outlook, Slack, Granola, and Notion. After user authorization, Pally can book flights, manage inboxes, reply to messages, and reserve restaurant tables. Pally uses Anthropic's Claude, OpenAI's ChatGPT, as well as open-source models such as Kimi K3 and GLM 5.2. Co-founder Haz Hubble stated that the company will not sell user data or use related data to train models. (Business Insider)
Microsoft Develops Three Types of AI Agents to Support Cyber Defense
According to Nikkei XTECH, Microsoft has developed a new system to address cyberattacks involving autonomous AI, using three types of AI agents to support the process from vulnerability identification to remediation. Microsoft will also launch its first self-developed AI model for cyber defense.
Google Releases Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber
Google releases next-generation Gemini Flash series models, including Gemini 3.6 Flash, Gemini 3.5 Flash-Lite, and Gemini 3.5 Flash Cyber for cybersecurity scenarios.
Related news
The EU Cyber Resilience Act officially takes effect, requiring crypto wallet vendors to report vulnerabilities within 24 hours.
According to Cointelegraph, the EU Cyber Resilience Act (CRA) officially entered into force, requiring cryptocurrency hardware and software wallet providers to submit an early warning within 24 hours of discovering a serious security vulnerability or an actively exploited vulnerability, a complete notification within 72 hours, and a final report within 14 days after remediation measures are implemented. The regulation applies to all "products with digital elements" sold in the EU market. Violating companies face administrative fines of up to €15 million (approximately $17.3 million) or 2.5% of their global annual turnover, whichever is higher; providing false or misleading information will result in an additional fine of up to €5 million. Previously, Trezor and BitBox have both disclosed user data breach incidents and warned users to be vigilant against phishing emails disguised as security notifications.
EU's Cyber Resilience Act Takes Effect: Crypto Wallet Vulnerabilities Must Be Reported Within 24 Hours
The EU's Cyber Resilience Act has taken effect. Cryptocurrency hardware and software wallet providers must submit an initial early warning within 24 hours after discovering actively exploited vulnerabilities or severe security flaws in their products, and submit a full notification within 72 hours.Manufacturers must submit a final report within 14 days after corrective or mitigating measures become available; serious incidents must be reported within one month. Companies that violate the relevant regulations may face fines of up to €15 million or 2.5% of global annual turnover, whichever is higher; providing false, incomplete, or misleading information may result in fines of up to €5 million. (Cointelegraph)
Canadian financial regulatory authority: Tokenized deposits have the same legal status as traditional deposits
According to a statement issued by the Office of the Superintendent of Financial Institutions (OSFI) on September 10, 2026, OSFI clarified its technology-neutral position, stating that tokenized and other digital deposits are legally indistinguishable from traditional deposits, and that the underlying technology of a financial product or service does not determine its legal nature. OSFI requires financial institutions to ensure that innovation activities (including those conducted by third parties on their behalf) comply with applicable laws and regulations, and to adhere to guidelines such as B-13 Technology and Cyber Risk Management and B-10 Third-Party Risk Management. Prior to launching any new products or services, financial institutions must communicate in advance with OSFI supervisors and seek legal advice when necessary.
Chainalysis "Operation Lighthouse" Investigates Over 29,000 Crypto Addresses Linked to CSAM Networks Across 125 Countries
According to Bitcoin.com, blockchain analytics firm Chainalysis announced the results of Operation Lighthouse on August 25. This transnational operation targeted criminal networks associated with child sexual abuse material (CSAM), investigating 29,120 cryptocurrency addresses and digital identifiers across more than 100 clearnet and darknet platforms, forums, and distribution networks. The effort generated 14,300 investigation leads and uncovered over 7,700 suspicious accounts and linked suspects spanning 125 countries. Coordinated in New York by the National Cyber Forensics & Training Alliance (NCFTA), the initiative involved at least nine law enforcement agencies, along with more than 13 private organizations and non-profits, including Europol, the Australian Federal Police, the Royal Canadian Mounted Police, and the UK’s National Crime Agency. Chainalysis stated that the discovered leads could subsequently result in account restrictions, arrests, and prosecutions. Law enforcement outcomes are expected to continue through 2027, and the company plans to extend this collaborative model to other types of crypto-related crime.
Chainalysis partners with Binance, Coinbase, and others to launch Operation Lighthouse targeting child sexual abuse material networks
According to CoinDesk, blockchain analytics firm Chainalysis stated that it organized the multi-day joint operation "Operation Beacon" in collaboration with crypto firms such as Binance and Coinbase, as well as law enforcement agencies from multiple countries, to investigate networks spreading child sexual abuse material using cryptocurrency. The operation is headquartered at the National Cyber-Forensics and Training Alliance in New York, with participating agencies including Europol, the Australian Federal Police, the Royal Canadian Mounted Police, and the UK's National Crime Agency.
U.S. Department of Justice Sues 17 Iranians Accused of Conducting Large-Scale Cyber Espionage Campaign on Behalf of Revolutionary Guards
The U.S. Department of Justice announced an indictment charging 17 members of Iran's Mabna Institute with long-running cyber intrusion campaigns targeting 144 U.S. universities, 178 foreign universities, at least 42 U.S. companies, 11 foreign companies, and multiple government and non-governmental agencies, resulting in the theft of more than 31 TB of academic data, intellectual property, and sensitive information. The indictment alleges that the group has conducted hacking operations under contract from the Islamic Revolutionary Guard Corps (IRGC) and other Iranian government and university entities since 2013, profiting by compromising accounts, stealing research materials and proprietary data, and selling portions of the illicitly acquired resources. Some individuals involved also participated in the HBO hacking incident, where internal data was exfiltrated and attempts were made to extort approximately $6 million in Bitcoin.