Coverage of #security spans 862 indexed articles, with 378 published in the last 30 days. Recent discussion leans bearish, at 49.7% negative sentiment versus 46.8% bullish, though sentiment has remained stable over the past month. Top sources include arXiv's computer science and AI research, along with cryptocurrency-focused outlets like Crypto Briefing and Blockonomi. The tag frequently intersects with #ai, #bitcoin, and geopolitical concerns, with Anthropic and Claude among the most-discussed entities. Bitcoin and Ethereum dominate ticker mentions in this coverage area. Explore the articles below to understand the full scope of recent #security developments.
The son of a US government contractor was arrested for allegedly stealing $46 million in cryptocurrency from the US Marshals Service. This incident exposes significant vulnerabilities in how government agencies manage and secure digital assets.
Google discovered a new iOS exploit kit called Coruna that silently infiltrates iPhones through compromised websites to steal cryptocurrency from popular wallet apps including MetaMask, Phantom, and Trust Wallet. The attack requires no user interaction beyond visiting a malicious website on an unpatched iPhone device.
X user 'Sillytuna' reported that approximately $24 million in cryptocurrency was stolen during a violent physical attack. The incident highlights the security risks faced by cryptocurrency traders and the potential for targeted crimes against crypto holders.
A crypto holder known as Sillytuna lost $24 million in aEthUSDC tokens through an address poisoning attack that also involved violent threats. The attacker has already converted most of the stolen funds according to on-chain data.
Trump has pledged to ensure the 'free flow of energy' from the Middle East but faces a critical week to demonstrate progress before energy prices potentially spike. The challenge remains significant as Iran's ability to strike tankers continues to create insurance and security issues for energy shipments.
Researchers have conducted the first theoretical analysis of Google's SynthID-Text watermarking system, revealing vulnerabilities in its detection methods and proposing attacks that can break the system. The study identifies weaknesses in the mean score detection approach and demonstrates that the Bayesian score offers better robustness, while establishing optimal parameters for watermark detection.
Researchers developed a new AI safety attack method using optimal transport theory that achieves 11% higher success rates in bypassing language model safety mechanisms compared to existing approaches. The study reveals that AI safety refusal mechanisms are localized to specific network layers rather than distributed throughout the model, suggesting current alignment methods may be more vulnerable than previously understood.
Researchers propose a hybrid AI agent and expert system architecture that uses semantic relations to automatically convert cyber threat intelligence reports into firewall rules. The system leverages hypernym-hyponym textual relations and generates CLIPS code for expert systems to create security controls that block malicious network traffic.
Researchers developed RoboGuard, a two-stage safety architecture to protect LLM-enabled robots from harmful behaviors caused by AI hallucinations and adversarial attacks. The system reduced unsafe plan execution from over 92% to below 3% in testing while maintaining performance on safe operations.
Coinbase, Microsoft and Europol successfully collaborated to shut down 'Tycoon 2FA', a major phishing-as-a-service operation. The service was responsible for 62% of phishing attempts blocked by Microsoft by mid-2024, including over 30 million malicious emails in a single month.
Blockstream Research has successfully deployed post-quantum signature verification on its Liquid Bitcoin sidechain, marking the first real transactions on a production Bitcoin sidechain signed with quantum-resistant cryptography. This development demonstrates that quantum-resistant tools can be tested in live environments, providing a foundation for future Bitcoin infrastructure upgrades.
Ripple is strengthening the XRP Ledger amendment process after discovering a critical bug in the proposed Batch amendment (XLS-56). The incident revealed gaps in the review process, though the network's safeguards prevented any impact on the mainnet.
SuperLocalMemory is a new privacy-preserving memory system for multi-agent AI that defends against memory poisoning attacks through local-first architecture and Bayesian trust scoring. The open-source system eliminates cloud dependencies while providing personalized retrieval through adaptive learning-to-rank, demonstrating strong performance metrics including 10.6ms search latency and 72% trust degradation for sleeper attacks.
Researchers introduce WARP, a new defense mechanism for machine unlearning protocols that protects against privacy attacks where adversaries can exploit differences between pre- and post-unlearning AI models. The technique reduces attack success rates by up to 92% while maintaining model accuracy on retained data.
Researchers have developed SymGPT, a new tool that combines large language models with symbolic execution to automatically audit smart contracts for ERC rule violations. The tool identified 5,783 violations in 4,000 real-world contracts, including 1,375 with clear attack paths for financial theft, outperforming existing automated analysis methods.
Researchers introduce 'Control Tax' - a framework to quantify the operational and financial costs of implementing AI safety oversight mechanisms. The study provides theoretical models and empirical cost estimates to help organizations balance AI safety measures with economic feasibility in real-world deployments.
Researchers have developed AudAgent, an automated tool that monitors AI agents in real-time to ensure they comply with their stated privacy policies. The tool revealed that many AI agents powered by major providers like Claude, Gemini, and DeepSeek fail to protect highly sensitive data like SSNs and violate their own privacy policies.
Ledger's CTO and other experts are warning that quantum computers could eventually become powerful enough to break Elliptic Curve cryptography, which would pose a significant threat to cryptocurrency security. This emerging risk highlights a potential vulnerability in current blockchain infrastructure that could impact the entire crypto ecosystem.
A senior Axiom employee is accused of insider trading by allegedly accessing sensitive user data, sharing private wallet screenshots, and coordinating targeted trading strategies worth $200K. The allegations involve potential misuse of privileged information for personal trading advantage.
South Korea's National Tax Service accidentally published a wallet seed phrase in a press release, leading to the immediate theft of $4.8 million in seized cryptocurrency tokens. This represents a major security blunder by government authorities in handling confiscated digital assets.
The XRPL Foundation successfully patched a critical vulnerability in the Ripple blockchain codebase before it reached mainnet deployment. An AI bug hunter identified the security flaw during code scanning, allowing engineers to fix the issue proactively.
Researchers demonstrate that large language models can successfully deanonymize pseudonymous users across online platforms at scale, achieving up to 68% recall at 90% precision. The study shows LLMs can match users between platforms like Hacker News and LinkedIn, or across Reddit communities, using only unstructured text data.
Employees at Axiom, a Solana trading platform, are accused of insider trading by using internal tools to access and track customer wallet data and trading activity. This represents a serious breach of customer trust and privacy in the cryptocurrency trading space.
Ethereum co-founder Vitalik Buterin has outlined a comprehensive 'bundle' strategy aimed at overhauling Ethereum's consensus mechanism and security infrastructure. The proposal focuses on preparing the network for post-quantum computing threats that could potentially compromise current cryptographic security measures.
Octane Security's AI tool discovered a high-severity bug in Nethermind, a software client that runs the Ethereum blockchain. This represents a significant security vulnerability in critical Ethereum infrastructure that could potentially impact network operations.
