mind

The founder of Slow Fog, Yu Xian, posted on the X platform stating that iOS has released a security update again, and the security of the iPhone is not as good as before, with various malicious exploits emerging.He reminded users not to install apps or open unfamiliar websites casually, especially those involving adult content, and noted that such reminders were mainly aimed at Windows in the past.

According to CoinPost, the Financial Services Agency of Japan has updated the warning page for "unlicensed financial and cryptocurrency trading platforms" and added a link to the Consumer Affairs Agency's anti-fraud measures, reminding investors to be cautious of trading platforms that are not registered in Japan.The Financial Services Agency pointed out that these unlicensed platforms lack investor protection mechanisms and often face issues such as refusing user withdrawals, charging "exorbitant fees," and even suddenly going offline. The official reminds users to verify the platform's qualifications through the "Unified Search Function for Financial Service Providers" before trading. In the warning list updated in September, a Hong Kong company operating "IZAKA-YA" was added. Additionally, the Consumer Affairs Agency of Japan has implemented anti-fraud measures in September, utilizing AI to analyze consumer consultation data from various regions to identify malicious fraud techniques early.

On November 9, Beijing time, according to a report by Reuters, U.S. President Trump stated in an interview with CBS's "60 Minutes" that the risks posed by artificial intelligence are manageable, and he does not mind setting regulatory guardrails. When asked whether the U.S. should accept the risks brought by artificial intelligence to maintain its leading edge over China, Trump said these dangers are controllable and expressed a willingness to work with Democrats to formulate relevant safeguards. Trump added that he does not want regulatory measures to cause the U.S. to fall behind China in the field of artificial intelligence, becoming a distant second.

According to the official account of the Linyi City Media Center, the Linyi authorities have issued a risk warning, exposing two major illegal financial scams: "Global Securities Exchange" and "Savings Project" APP.Among them, the "Global Securities Exchange" project promotes high returns, enticing the public to invest in and purchase virtual currencies. Participants are advised to withdraw as soon as possible to prevent losses. The notice issued by the People's Bank of China and other departments regarding further prevention and handling of risks related to virtual currencies clearly states that virtual currencies do not have the same legal status as legal tender.

Web3Auth has published an update on the X platform regarding the asset recovery progress of the Keplr wallet security incident. The team, with the assistance of Keplr, is transferring assets from the affected wallets to a secure recovery wallet. Due to some recovery transfers being mistakenly identified as attacker activity, Web3Auth has released verified recovery wallet addresses, covering networks such as Cosmos Hub, Osmosis, Celestia, Akash, Noble, Injective, dYdX, Babylon, Axelar, Saga, Agoric, and EVM addresses spanning 8 chains.Web3Auth further stated that the relevant addresses are used for the secure transfer of affected assets and are not wallets controlled by attackers. More verified addresses will be updated in the future, and users are reminded to pay attention to official channel announcements and to be wary of scams impersonating official personnel and false asset recovery requests.

Google DeepMind posted on the X platform that it has released a new study demonstrating how AI agents can accelerate stress testing of cryptographic systems. Under human guidance, its model identified two significant vulnerabilities in the traditional 1024-bit RSA encryption system.DeepMind stated that modern 2048-bit systems are not affected by these specific vulnerabilities, but this work indicates that as the era of AI-driven mathematics and computation arrives, reliance on historical assumptions of computational difficulty can no longer be maintained, and continuous stress testing of cryptographic standards is essential.

The Ethereum Foundation published a blog, reminding contract developers and auditors to check whether their projects rely on 8 Gas billing assumptions, which will no longer hold due to the adjustments in Gas charging methods in Glamsterdam with EIP-8037 and EIP-8038. The Ethereum Foundation has established a code repository that provides explanations, examples, and keywords for self-checking related to each assumption. Affected projects can contact the team via email.The team is collaborating with several auditing companies and conducting internal audits, but it cannot cover all projects on Ethereum and their on-chain and off-chain code. The Ethereum Foundation announced on October 23 that it has postponed the Glamsterdam upgrade originally scheduled to be activated on the Hoodi testnet, with a new activation time yet to be determined. Ethereum Foundation researcher Toni Wahrstätter stated on October 26 that the reason for the delay was a report from ChainSecurity that revealed issues with EIP-8037 when interacting with certain contracts, and its impact is now largely understood.

According to Singapore's Lianhe Zaobao, in response to the recent incident where approximately $6.3 billion in assets were stolen from Binance, the Monetary Authority of Singapore reiterated that the general public is not suitable for engaging in cryptocurrency trading. Consumers must exercise caution when trading and should not transact with unregulated companies.The Monetary Authority pointed out that Binance is not authorized to provide regulated financial services in Singapore and was placed on the investor alert list as early as September 2021. Although its local platform Binance.sg ceased operations in 2022, it could not prevent Singapore investors from using Binance.com. A spokesperson for the Monetary Authority stated that licensed digital payment token service providers must establish strict control mechanisms to effectively manage technological and network risks and protect customer assets. However, even with a license, regulatory measures cannot completely prevent consumers from incurring losses due to the inherently high risks associated with cryptocurrencies.

CZ cited security researchers regarding the discovery of counterfeit Trust Wallet websites, reminding users to be cautious in distinguishing between .cam and .com domain names.

Solana ecosystem wallet and exchange Backpack issued a security alert, warning users to be cautious of fraudulent airdrop activities disguised as tokenized stocks.Backpack stated that scammers may reference real token addresses to make related activities appear legitimate, thereby enticing users to participate. The company advises users to refer to its official Solana minting directory and verify the token addresses before proceeding.

According to a report by The Paper, in response to rumors circulating online about the preparation of an AI startup focused on Recursive Self-Improvement (RSI) with a project valuation of up to $2 billion, Google DeepMind senior research scientist Yao Shunyu explicitly denied it, stating, "I have not founded a company and am still an employee of Google DeepMind," and claimed to have no idea where the related rumors originated.Previously, there were reports that Yao Shunyu's startup team had basically taken shape, intending to attract research and engineering talent from leading AI labs such as Google DeepMind, Anthropic, and OpenAI. This is not the first time Yao Shunyu has responded to startup rumors. On October 12, he publicly stated that there are currently no plans to raise funds in China and urged the public not to waste time on related rumors.

Flap posted on platform X that its official website is currently experiencing DNS hijacking and is being redirected to an unauthorized website.The team reminds users not to visit the official website, connect wallets, or sign any transactions, and stated that they are addressing the issue. An update will be released once the website's safety is confirmed.

According to a report from DeepMind Institute, Google DeepMind researchers Alex Imas, Andrew Koh, and co-founder Shane Legg stated that the enhancement of individual AI capabilities will only gradually affect wages and prices. It is only when the collaborative abilities of multiple agents surpass the "super-collaboration" threshold that market concentration, employment, and wages will experience a sudden change.The article divides the development of AI into four stages: minimal AGI, super-competent AI, super-collaborative AI, and ASI. The article points out that current AI has strong individual capabilities but weak collaborative abilities, and changes in wages and job positions will occur before changes in corporate structures. The authors call for the establishment of benchmarks to measure the organizational capabilities of multiple agents.

Binance founder Changpeng Zhao posted on X reminding not to click on links in emails or download attachments.Changpeng Zhao stated that even if the email comes from a trusted person, the other party's computer may be infected with a virus without their knowledge.

CZ's post pointed out that on that day, there were 4 reported data breaches involving Coinbase's third-party vendor Amplitude, the South Korean cryptocurrency exchange Bithumb, and South Korean securities firms Mirae Asset and Daishin Securities. Among them, the breach related to Amplitude did not affect customer funds.CZ stated that the leaked exchange data was primarily used for phishing, SIM card hijacking, social engineering scams, and wrench attacks. He suggested that all platforms use independent email aliases and dedicated backup numbers, refuse to fill out unnecessary personal information, and use strong independent passwords.CZ also recommended enforcing the use of hardware security keys or passkeys, completely disabling SMS 2FA, enabling withdrawal address whitelists, withdrawal time locks, and anti-phishing codes, regularly cleaning API keys and active sessions, and requesting number porting locks from carriers. He also reminded that all customer service contacts that reach out proactively are scammers, and never to click on external links.

The humanoid robot company Yushu Technology (688836.SH) announced that the cumulative price deviation of the company's stock closing price has exceeded 30% over three consecutive trading days, which falls under the category of abnormal stock trading fluctuations. As of October 26, 2026, the company's rolling price-to-earnings ratio is 465.22 times, significantly higher than the average rolling price-to-earnings ratio of 38.54 times in the general equipment manufacturing industry.The announcement pointed out that the humanoid robot industry is still in the early stages of commercialization, with uncertainties in technology maturity, cultivation of downstream market demand, and supporting capabilities in the industrial chain. The transition of physical AI technology from laboratory demonstrations to large-scale implementation in real-world scenarios still faces challenges such as perception accuracy, motion control stability, data accumulation, and hardware-software collaboration. The maturity of the technological path and business model still requires time for validation. If the industry's large-scale commercialization progress does not meet expectations, the company's future revenue expansion and performance release may be adversely affected, posing investment risks of valuation regression.

Google DeepMind researchers Zhengxuan Wu, Yuxuan Li, Oyvind Tafjord, and Been Kim released a preprint paper titled "XYEval: Agents say yes to bad advice," proposing a meta-evaluation framework XYEval to assess the performance of agents when faced with misleading suggestions from users. The paper extends the "XY problem" to the agent scenario, where the user inquires about their attempted solution X rather than the actual problem Y.XYEval retains the original task environment and verifiable answers, only adding seemingly reasonable but misleading user suggestions in the instructions. The misleading suggestions are generated by a generator after seeing the complete task and are appended in the form of confident suggestions rather than hard requirements, allowing the original task to remain solvable. The evaluation covers six benchmarks: τ2-bench, SWE-bench Verified, SWE-bench Pro, Terminal-Bench, Humanity's Last Exam, and MCP-Atlas, along with five models, where the misleading suggestions for τ2-bench are generated based on rules set by human experts.The paper states that the performance significantly declines after the XY mutation, with the relative drop reaching up to 46.7%. On τ2-bench, when faced with users who require a detailed explanation before accepting a better solution, the performance drops even more. Encouraging models to recognize the XY problem through simple system instructions only partially alleviates the issue. The related code is published in the GitHub repository google-deepmind/xyeval.

The South Korean cryptocurrency exchange Upbit announced that it has recently discovered that criminals are impersonating the GIWA blockchain project, spreading false information about the mainnet launch and digital asset issuance, and inducing users to transfer assets.Upbit stated that GIWA is an Ethereum Layer 2 network being developed by its parent company Dunamu, which is currently only running a testnet, and the mainnet is still in the development and preparation stage, with no official launch time announced yet. Upbit reminds users to be cautious of unverified information regarding the mainnet launch, token issuance, and investment, and not to trust unofficial channels that request the purchase of digital assets, transfers, or wallet connections. Project progress should be based on information released by the official GIWA website and official social media.

According to the official website of the State Taxation Administration, the Taxation Administration has issued a reminder for offshore trust taxpayers to declare and pay individual income tax on offshore trust income before the transition period ends on October 22. Those who complete the declaration and payment during the transition period will not incur late fees.According to the "Announcement on Matters Related to Individual Income Tax for Offshore Trusts" (Announcement No. 21 of 2026) issued by the Ministry of Finance and the State Taxation Administration on July 24, offshore trust taxpayers are required to declare and pay taxes on offshore trust income. The announcement provides taxpayers with a 90-day transition period, during which the tax authorities will offer tax guidance and tax filing services.

Elon Musk stated that the Star Mind computer, jointly developed by SpaceX and Nvidia, has performed far beyond almost everyone's expectations and plans to achieve mass production next year.