News Heat Trend
Project Overview
Cyber is a restaked Ethereum Layer 2 designed for social and optimized for mass adoption. It serves as the social layer for web3 applications and the gateway for the next wave of users to access web3 experiences, tools and financial liquidity across all Layer 2 ecosystems.
AI Data Security Company MIND Completes $72 Million Series B Funding Round Led by Crosspoint Capital Partners
According to PRNewswire, AI-native data loss prevention (DLP) security company MIND announced the completion of a $72 million Series B financing round, led by Crosspoint Capital Partners, with existing investors YL Ventures and Paladin Capital Group participating. To date, the company has raised a cumulative total of $112 million. MIND disclosed that it has joined the Anthropic Cyber Verification Program and obtained ISO/IEC 42001 certification. The company plans to utilize the proceeds from this funding round to accelerate the development of its AI-native DLP platform, expand into the enterprise market, deepen technology and channel partnerships, and scale its team.
UK cybersecurity startup Cytix completes 6 million euro Series A funding round
According to EU-Startups, UK cybersecurity startup Cytix announced the completion of a 6 million euro (approximately 7 million USD) Series A funding round, led by UK venture capital firm Northern Gritstone, with participation from existing investors Auriga Cyber Ventures and NPIF II – PXN Equity Finance. Founded in 2020, Cytix focuses on addressing software change security risks arising from AI-assisted development, agent workflows, and continuous delivery, and its change risk management platform helps enterprises identify high-risk changes and take corresponding measures.
AI personal assistant company Pally completes $5.2 million in funding, led by Cyber Fund and Y Combinator
Odaily Odaily News: AI personal assistant startup Pally has announced the completion of a $5.2 million funding round, led by Cyber Fund and Y Combinator, with participation from Pioneer Fund, Founders Inc, 468 Capital, and angel investors. The company is valued at $30 million and primarily provides AI personal assistant services through an SMS interface. Pally was launched in 2025, with its latest version released in June, and can sync with platforms such as Gmail, Outlook, Slack, Granola, and Notion. After user authorization, Pally can book flights, manage inboxes, reply to messages, and reserve restaurant tables. Pally uses Anthropic's Claude, OpenAI's ChatGPT, as well as open-source models such as Kimi K3 and GLM 5.2. Co-founder Haz Hubble stated that the company will not sell user data or use related data to train models. (Business Insider)
Pakistan's Federal Investigation Agency (FIA) Establishes Cryptocurrency Investigation Unit to Combat Money Laundering and Terrorist Financing
the Federal Investigation Agency (FIA) of Pakistan has established a cryptocurrency investigation unit within its newly inaugurated National Command and Control Center (NC3) to probe money laundering and terrorist financing activities conducted through virtual currencies.Dr. Muhammad Athar Waheed, head of the FIA's Counter-Terrorism Department, stated that the new unit will investigate the criminal use of cryptocurrencies. The newly formed Pakistan Virtual Asset Regulatory Authority (PVARA) will be responsible for overseeing digital assets. Dr. Waheed also urged the National Cyber Crimes Investigation Agency and the Anti-Narcotics Force to establish similar departments to address the use of cryptocurrencies in cybercrime and drug trafficking.The NC3 integrates the FIA's financial crime tools onto a single platform, including anti-money laundering and virtual currency investigation units, an Interpol coordination point, open-source intelligence, cyber patrolling, and dark web investigation departments. Pakistan previously lifted its eight-year ban on cryptocurrency banking, created the PVARA, and is advancing the licensing of cryptocurrency exchanges. (Decrypt)
Post-quantum cryptography security company QIZ Security completes $17 million seed funding round
According to PR Newswire, post-quantum cryptography (PQC) management platform QIZ Security announced the completion of a $17 million seed funding round, led by Bessemer Venture Partners and Merlin Ventures, with participation from Evolution Equity Partners, Qbeat Ventures, Singtel Innov8, and Qino Cyber Capital. The funding will be used to accelerate product development and market expansion. QIZ's core capabilities lie in providing enterprises with continuous crypto asset discovery, risk modeling, and remediation governance, helping organizations complete the migration to quantum-safe architecture before "Q-Day" (the point in time when quantum computers are expected to possess the capability to break existing encryption systems, anticipated around 2029) arrives. Currently, QIZ has established strategic partnerships with Cisco, AWS, Google, CrowdStrike, Deloitte, EY, and IBM, among others, with services covering the finance, telecommunications, healthcare, and critical infrastructure sectors. The company was co-founded by cybersecurity industry veterans Ben Volkow, Lenny Ridel, and former head of Deloitte's Global Quantum Cybersecurity team, Dr. Itan Barmes.
Japan's Liberal Democratic Party proposes establishing a Prime Minister's Office-led cyber response headquarters to track illicit crypto assets and accelerate migration to post-quantum cryptography.
According to CoinPost, the "Proposal for Fundamental Strengthening of Cybersecurity Countermeasures" compiled by the Japan Liberal Democratic Party National Cybersecurity Strategy Headquarters (Chairperson: Masaaki Hirai) was approved by the Party-Government-Administrative Coordination Council on October 22. The proposal characterizes the current landscape as the "eve of a cyber crisis," centering on the establishment of a "Cyber Response Headquarters (provisional)" led by the Prime Minister's Secretariat. The proposal directs the National Police Agency to lead participation in international joint investigations with agencies such as the FBI and Europol, dismantle criminal infrastructure including command-and-control servers, and actively track illicitly acquired crypto assets. It also mandates the National Cyber Coordination Office to accelerate migration to post-quantum cryptography (PQC). Referencing the migration schedules for high-impact systems in major Western nations around 2030–2031, the proposal sets an earlier deadline for critical government systems. The article notes that electronic signatures for Bitcoin (BTC) are equally vulnerable to future quantum computing threats.
South Korean police have transferred 18 Polymarket users, with cumulative wagers involved in the case totaling approximately 17.6 billion Korean won.
According to reports from Asia Economic, the Cyber Investigation Unit of the Gangwon Regional Police Agency has filed cases against 26 users of the overseas prediction market platform Polymarket and transferred 18 of them to prosecutors. The cumulative betting amount among those involved is approximately 17.6 billion Korean won, with the highest individual amount reaching about 5.7 billion KRW. Police maintain that users betting on uncertain event outcomes using crypto assets are suspected of committing illegal gambling. The involved users counter that because Polymarket employs order book trading and supports closing positions before maturity, it should be treated as a crypto derivatives market. Relevant South Korean authorities had previously decided to block the platform, and subsequent judicial disputes will focus on whether its trading structure should be classified as gambling or derivatives investment.
The EU Cyber Resilience Act officially takes effect, requiring crypto wallet vendors to report vulnerabilities within 24 hours.
According to Cointelegraph, the EU Cyber Resilience Act (CRA) officially entered into force, requiring cryptocurrency hardware and software wallet providers to submit an early warning within 24 hours of discovering a serious security vulnerability or an actively exploited vulnerability, a complete notification within 72 hours, and a final report within 14 days after remediation measures are implemented. The regulation applies to all "products with digital elements" sold in the EU market. Violating companies face administrative fines of up to €15 million (approximately $17.3 million) or 2.5% of their global annual turnover, whichever is higher; providing false or misleading information will result in an additional fine of up to €5 million. Previously, Trezor and BitBox have both disclosed user data breach incidents and warned users to be vigilant against phishing emails disguised as security notifications.
EU's Cyber Resilience Act Takes Effect: Crypto Wallet Vulnerabilities Must Be Reported Within 24 Hours
The EU's Cyber Resilience Act has taken effect. Cryptocurrency hardware and software wallet providers must submit an initial early warning within 24 hours after discovering actively exploited vulnerabilities or severe security flaws in their products, and submit a full notification within 72 hours.Manufacturers must submit a final report within 14 days after corrective or mitigating measures become available; serious incidents must be reported within one month. Companies that violate the relevant regulations may face fines of up to €15 million or 2.5% of global annual turnover, whichever is higher; providing false, incomplete, or misleading information may result in fines of up to €5 million. (Cointelegraph)
Canadian financial regulatory authority: Tokenized deposits have the same legal status as traditional deposits
According to a statement issued by the Office of the Superintendent of Financial Institutions (OSFI) on September 10, 2026, OSFI clarified its technology-neutral position, stating that tokenized and other digital deposits are legally indistinguishable from traditional deposits, and that the underlying technology of a financial product or service does not determine its legal nature. OSFI requires financial institutions to ensure that innovation activities (including those conducted by third parties on their behalf) comply with applicable laws and regulations, and to adhere to guidelines such as B-13 Technology and Cyber Risk Management and B-10 Third-Party Risk Management. Prior to launching any new products or services, financial institutions must communicate in advance with OSFI supervisors and seek legal advice when necessary.
Chainalysis "Operation Lighthouse" Investigates Over 29,000 Crypto Addresses Linked to CSAM Networks Across 125 Countries
According to Bitcoin.com, blockchain analytics firm Chainalysis announced the results of Operation Lighthouse on August 25. This transnational operation targeted criminal networks associated with child sexual abuse material (CSAM), investigating 29,120 cryptocurrency addresses and digital identifiers across more than 100 clearnet and darknet platforms, forums, and distribution networks. The effort generated 14,300 investigation leads and uncovered over 7,700 suspicious accounts and linked suspects spanning 125 countries. Coordinated in New York by the National Cyber Forensics & Training Alliance (NCFTA), the initiative involved at least nine law enforcement agencies, along with more than 13 private organizations and non-profits, including Europol, the Australian Federal Police, the Royal Canadian Mounted Police, and the UK’s National Crime Agency. Chainalysis stated that the discovered leads could subsequently result in account restrictions, arrests, and prosecutions. Law enforcement outcomes are expected to continue through 2027, and the company plans to extend this collaborative model to other types of crypto-related crime.
Hacker group WhiteArmor steals 15.42 million Gamdom account records, demands $15 million in Bitcoin
Odaily reports: Cyber extortion group WhiteArmor claims to have obtained the complete user database of crypto casino Gamdom, involving approximately 15.42 million accounts and 146 columns of data, and is demanding a payment of $15 million in Bitcoin. The group claims to have breached the system through an internal machine account with administrator privileges, and has published approximately 100 account records as evidence.Previously, Gamdom suffered a hot wallet attack on October 13, with the platform officially confirming losses exceeding $3 million, while on-chain researchers estimated losses at approximately $4.2 million. Currently, there is no evidence linking the two incidents, and the scale of the data breach claimed by WhiteArmor has not yet been independently verified. (Dark Web Informer)
Immunefi CEO warns PHP vulnerability could leave websites exploitable for weeks.
According to Cointelegraph, Immunefi CEO Mitchell Amador warned that internet users remain at risk of cyberattacks originating from PHP vulnerabilities, particularly on smaller websites that have been slow to apply the upgrade patches released last Wednesday, which could take weeks to complete the updates. He described it as an orchestrated "vulnerability doomsday," characterized by low costs to discover vulnerabilities and high costs to patch them. Amador advised treating any website requiring a login as potentially compromised over the coming weeks, avoiding password reuse, exercising caution when connecting crypto wallets to sites, and revoking unrecognized token approvals. The PHP Foundation previously acknowledged that resource shortages delayed the fix for a critical security vulnerability first identified in 2024. While PHP developers issued emergency patches for two critical vulnerabilities on the same day, websites must still manually apply the updates. Cloudflare CEO Matthew Prince noted that millions of exploitation attempts were recorded across the web within 24 hours of the disclosure, with thousands already underway prior to the announcement. W3Techs estimates that PHP supports approximately 69% of websites using known server-side programming languages. The FBI Cyber Division warned that the flaw could allow malicious actors to "remotely execute code within the PHP core, potentially compromising sensitive data and networks."
Nina Rong: BNB Chain's tech stack does not use PHP.
Nina Rong (@nina_rong), Head of Growth at BNB Chain, posted that BNB Chain's technology stack does not use PHP and reminded users to remain vigilant. Previously, the National Security Agency's cybersecurity division NSA Cyber (@NSACyber) issued an advisory stating that all organizations using PHP to build systems should prepare for updates aimed at fixing two critical vulnerabilities. PHP is widely used in web applications, and such vulnerabilities can typically provide direct access to the server file system.
The EU Cyber Resilience Act officially takes effect, requiring crypto wallet vendors to report vulnerabilities within 24 hours.
According to Cointelegraph, the EU Cyber Resilience Act (CRA) officially entered into force, requiring cryptocurrency hardware and software wallet providers to submit an early warning within 24 hours of discovering a serious security vulnerability or an actively exploited vulnerability, a complete notification within 72 hours, and a final report within 14 days after remediation measures are implemented. The regulation applies to all "products with digital elements" sold in the EU market. Violating companies face administrative fines of up to €15 million (approximately $17.3 million) or 2.5% of their global annual turnover, whichever is higher; providing false or misleading information will result in an additional fine of up to €5 million. Previously, Trezor and BitBox have both disclosed user data breach incidents and warned users to be vigilant against phishing emails disguised as security notifications.
EU's Cyber Resilience Act Takes Effect: Crypto Wallet Vulnerabilities Must Be Reported Within 24 Hours
The EU's Cyber Resilience Act has taken effect. Cryptocurrency hardware and software wallet providers must submit an initial early warning within 24 hours after discovering actively exploited vulnerabilities or severe security flaws in their products, and submit a full notification within 72 hours.Manufacturers must submit a final report within 14 days after corrective or mitigating measures become available; serious incidents must be reported within one month. Companies that violate the relevant regulations may face fines of up to €15 million or 2.5% of global annual turnover, whichever is higher; providing false, incomplete, or misleading information may result in fines of up to €5 million. (Cointelegraph)
U.S. Department of Justice Sues 17 Iranians Accused of Conducting Large-Scale Cyber Espionage Campaign on Behalf of Revolutionary Guards
The U.S. Department of Justice announced an indictment charging 17 members of Iran's Mabna Institute with long-running cyber intrusion campaigns targeting 144 U.S. universities, 178 foreign universities, at least 42 U.S. companies, 11 foreign companies, and multiple government and non-governmental agencies, resulting in the theft of more than 31 TB of academic data, intellectual property, and sensitive information. The indictment alleges that the group has conducted hacking operations under contract from the Islamic Revolutionary Guard Corps (IRGC) and other Iranian government and university entities since 2013, profiting by compromising accounts, stealing research materials and proprietary data, and selling portions of the illicitly acquired resources. Some individuals involved also participated in the HBO hacking incident, where internal data was exfiltrated and attempts were made to extort approximately $6 million in Bitcoin.
Immunefi CEO warns PHP vulnerability could leave websites exploitable for weeks.
According to Cointelegraph, Immunefi CEO Mitchell Amador warned that internet users remain at risk of cyberattacks originating from PHP vulnerabilities, particularly on smaller websites that have been slow to apply the upgrade patches released last Wednesday, which could take weeks to complete the updates. He described it as an orchestrated "vulnerability doomsday," characterized by low costs to discover vulnerabilities and high costs to patch them. Amador advised treating any website requiring a login as potentially compromised over the coming weeks, avoiding password reuse, exercising caution when connecting crypto wallets to sites, and revoking unrecognized token approvals. The PHP Foundation previously acknowledged that resource shortages delayed the fix for a critical security vulnerability first identified in 2024. While PHP developers issued emergency patches for two critical vulnerabilities on the same day, websites must still manually apply the updates. Cloudflare CEO Matthew Prince noted that millions of exploitation attempts were recorded across the web within 24 hours of the disclosure, with thousands already underway prior to the announcement. W3Techs estimates that PHP supports approximately 69% of websites using known server-side programming languages. The FBI Cyber Division warned that the flaw could allow malicious actors to "remotely execute code within the PHP core, potentially compromising sensitive data and networks."
Nina Rong: BNB Chain's tech stack does not use PHP.
Nina Rong (@nina_rong), Head of Growth at BNB Chain, posted that BNB Chain's technology stack does not use PHP and reminded users to remain vigilant. Previously, the National Security Agency's cybersecurity division NSA Cyber (@NSACyber) issued an advisory stating that all organizations using PHP to build systems should prepare for updates aimed at fixing two critical vulnerabilities. PHP is widely used in web applications, and such vulnerabilities can typically provide direct access to the server file system.
Monetary Authority of Singapore: AI and Cyber Risks Become Top Concerns for Financial Institutions
As reported by Bloomberg, the Monetary Authority of Singapore's Financial Stability Assessment indicates that AI-assisted cyber and operational risks have surpassed geopolitical tensions to become the most prevalent concern among local financial institutions. Among surveyed chief risk officers, 80% identified cyber and operational risks as their top concern, while 77% cited geopolitical risks; the cooling of the AI investment fervor also ranks among the key risks.
South Korean police have transferred 18 Polymarket users, with cumulative wagers involved in the case totaling approximately 17.6 billion Korean won.
According to reports from Asia Economic, the Cyber Investigation Unit of the Gangwon Regional Police Agency has filed cases against 26 users of the overseas prediction market platform Polymarket and transferred 18 of them to prosecutors. The cumulative betting amount among those involved is approximately 17.6 billion Korean won, with the highest individual amount reaching about 5.7 billion KRW. Police maintain that users betting on uncertain event outcomes using crypto assets are suspected of committing illegal gambling. The involved users counter that because Polymarket employs order book trading and supports closing positions before maturity, it should be treated as a crypto derivatives market. Relevant South Korean authorities had previously decided to block the platform, and subsequent judicial disputes will focus on whether its trading structure should be classified as gambling or derivatives investment.
Canadian financial regulatory authority: Tokenized deposits have the same legal status as traditional deposits
According to a statement issued by the Office of the Superintendent of Financial Institutions (OSFI) on September 10, 2026, OSFI clarified its technology-neutral position, stating that tokenized and other digital deposits are legally indistinguishable from traditional deposits, and that the underlying technology of a financial product or service does not determine its legal nature. OSFI requires financial institutions to ensure that innovation activities (including those conducted by third parties on their behalf) comply with applicable laws and regulations, and to adhere to guidelines such as B-13 Technology and Cyber Risk Management and B-10 Third-Party Risk Management. Prior to launching any new products or services, financial institutions must communicate in advance with OSFI supervisors and seek legal advice when necessary.
Hackers Exploit macOS Screen Sharing Vulnerability to Gain Root Access and Mine Monero
Odaily News: The Dutch National Cyber Security Centre (NCSC) has reported that attackers are exploiting a vulnerability in Apple's macOS Screen Sharing feature to take control of devices and install Monero mining programs. Multiple systems with port 5900 exposed to the internet have been compromised, with attackers gaining root access. The vulnerability, tracked as CVE-2026-65400, has a severity score of 7.1 out of 10. It stems from a state management error in the authentication process, allowing remote attackers to bypass login verification without valid credentials. Public proof-of-concept code has already been circulated. Apple has addressed the issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. The NCSC advises users to update their systems promptly and avoid exposing the Screen Sharing service directly to the internet. (Decrypt)
Related news
Hacker group WhiteArmor steals 15.42 million Gamdom account records, demands $15 million in Bitcoin
Odaily reports: Cyber extortion group WhiteArmor claims to have obtained the complete user database of crypto casino Gamdom, involving approximately 15.42 million accounts and 146 columns of data, and is demanding a payment of $15 million in Bitcoin. The group claims to have breached the system through an internal machine account with administrator privileges, and has published approximately 100 account records as evidence.Previously, Gamdom suffered a hot wallet attack on October 13, with the platform officially confirming losses exceeding $3 million, while on-chain researchers estimated losses at approximately $4.2 million. Currently, there is no evidence linking the two incidents, and the scale of the data breach claimed by WhiteArmor has not yet been independently verified. (Dark Web Informer)
Immunefi CEO warns PHP vulnerability could leave websites exploitable for weeks.
According to Cointelegraph, Immunefi CEO Mitchell Amador warned that internet users remain at risk of cyberattacks originating from PHP vulnerabilities, particularly on smaller websites that have been slow to apply the upgrade patches released last Wednesday, which could take weeks to complete the updates. He described it as an orchestrated "vulnerability doomsday," characterized by low costs to discover vulnerabilities and high costs to patch them. Amador advised treating any website requiring a login as potentially compromised over the coming weeks, avoiding password reuse, exercising caution when connecting crypto wallets to sites, and revoking unrecognized token approvals. The PHP Foundation previously acknowledged that resource shortages delayed the fix for a critical security vulnerability first identified in 2024. While PHP developers issued emergency patches for two critical vulnerabilities on the same day, websites must still manually apply the updates. Cloudflare CEO Matthew Prince noted that millions of exploitation attempts were recorded across the web within 24 hours of the disclosure, with thousands already underway prior to the announcement. W3Techs estimates that PHP supports approximately 69% of websites using known server-side programming languages. The FBI Cyber Division warned that the flaw could allow malicious actors to "remotely execute code within the PHP core, potentially compromising sensitive data and networks."
Japan's Liberal Democratic Party proposes establishing a Prime Minister's Office-led cyber response headquarters to track illicit crypto assets and accelerate migration to post-quantum cryptography.
According to CoinPost, the "Proposal for Fundamental Strengthening of Cybersecurity Countermeasures" compiled by the Japan Liberal Democratic Party National Cybersecurity Strategy Headquarters (Chairperson: Masaaki Hirai) was approved by the Party-Government-Administrative Coordination Council on October 22. The proposal characterizes the current landscape as the "eve of a cyber crisis," centering on the establishment of a "Cyber Response Headquarters (provisional)" led by the Prime Minister's Secretariat. The proposal directs the National Police Agency to lead participation in international joint investigations with agencies such as the FBI and Europol, dismantle criminal infrastructure including command-and-control servers, and actively track illicitly acquired crypto assets. It also mandates the National Cyber Coordination Office to accelerate migration to post-quantum cryptography (PQC). Referencing the migration schedules for high-impact systems in major Western nations around 2030–2031, the proposal sets an earlier deadline for critical government systems. The article notes that electronic signatures for Bitcoin (BTC) are equally vulnerable to future quantum computing threats.
Nina Rong: BNB Chain's tech stack does not use PHP.
Nina Rong (@nina_rong), Head of Growth at BNB Chain, posted that BNB Chain's technology stack does not use PHP and reminded users to remain vigilant. Previously, the National Security Agency's cybersecurity division NSA Cyber (@NSACyber) issued an advisory stating that all organizations using PHP to build systems should prepare for updates aimed at fixing two critical vulnerabilities. PHP is widely used in web applications, and such vulnerabilities can typically provide direct access to the server file system.
Bitwise CEO: AI and Crypto 'Come from the Same Root,' Plans to Expand AI Layout
Bitwise CEO Hunter Horsley stated that AI and crypto "come from the same root," and the company plans to do more business in the AI sector. Currently, Bitwise has two AI ETF applications pending approval: the Bitwise AI Cyber Defense ETF and the Bitwise AI Bond ETF. In addition, the company launched the first spot NEAR ETF in the United States last week. (TheBlock)
Monetary Authority of Singapore: AI and Cyber Risks Become Top Concerns for Financial Institutions
As reported by Bloomberg, the Monetary Authority of Singapore's Financial Stability Assessment indicates that AI-assisted cyber and operational risks have surpassed geopolitical tensions to become the most prevalent concern among local financial institutions. Among surveyed chief risk officers, 80% identified cyber and operational risks as their top concern, while 77% cited geopolitical risks; the cooling of the AI investment fervor also ranks among the key risks.