SHELL Buyback Address has once again withdrawn 1 million tokens from Binance, and the buyback progress has reached 81.2%.

Email marketing platform Brevo has disclosed that attackers exploited an authorization boundary vulnerability in its login system to access 138 customer accounts. Among these accounts, 6 were used to send phishing emails, 43 had their contact information exported, and 93 showed no signs of valid misuse. Brevo did not clarify whether there was overlap between these account categories. Affected clients include crypto hardware wallet manufacturers Trezor and BitBox, as well as crypto portfolio and tax reporting platform CoinTracking. Attackers used Trezor’s Brevo account to send phishing emails titled “Critical Security Alert: STM32 Entropy Vulnerability” to around 347,000 newsletter subscribers, directing users to a malicious application to submit wallet backup information. Trezor blocked the relevant domain at the DNS layer within 20 minutes, but approximately 2,500 users had already accessed the link by then. Trezor stated that its Brevo account only stored subscribers’ email addresses, not other customer data, but is currently treating all roughly 347,000 email addresses as compromised by attackers, which could be used for subsequent phishing activities. BitBox has not yet found evidence of leaked funds or recovery phrases; CoinTracking users received fake emails asking them to refresh their API keys.

Per TradingBeats monitoring, the total long position of "Ma Ji" has expanded to $107 million, with an unrealized profit of roughly $80,000 as of now, while the trader has incurred a $5.6 million loss over the past week. The position breakdown is as follows: · 40,650 ETH long positions with 25x leverage, valued at approximately $99.971 million; · 50 BTC long positions with 40x leverage, worth around $3.856 million; · 42,950 HYPE long positions with 10x leverage, totaling about $3.406 million.

Beating AI Express News: Cursor has launched Projects, upgrading from a single Agent working model to an "Agent managing Agents" framework. Each project features a coordinating Agent that does not write code itself; instead, it is responsible for breaking down tasks, formulating plans, and distributing work to thousands of sub-Agents for parallel execution. Projects permanently store codebases, research findings, and user preferences, enabling work to resume even after months of pause. Tasks run on the cloud by default, so they won’t stop even when your computer is powered off; when local testing is required, it automatically spins up local Agents. The tool can also monitor Slack and pull requests (PRs), automatically fix CI issues, and kick off new tasks on its own without users needing to send additional prompts. This marks the official productization of Cursor’s earlier multi-Agent experiments. Back in January this year, Cursor demonstrated hundreds of Agents collaborating simultaneously, even building a browser from scratch with over 1 million lines of code. Now Projects is in beta and gradually rolling out to all users.

According to an official announcement, Binance will temporarily suspend U.S. stock trading to carry out system upgrades for its partner broker program. During this period, users will be unable to submit stock trading orders. The system upgrade is scheduled from 18:50 to 21:30 on September 12, 2026 (GMT+8).

According to a report by the Financial Times, foreign ministers of Gulf countries plan to meet with their Iranian counterpart in response to an initiative by Oman and Iran, to secure support for a temporary agreement on managing shipping in the Strait of Hormuz. Meanwhile, regional nations are seeking ways to ease tensions surrounding the key waterway. Proposed by Oman, the meeting will mark the first gathering between senior diplomats from the six-member Gulf Cooperation Council (GCC) and Iranian officials since the outbreak of US-Iran tensions in late February. Sources said the meeting is scheduled for next Monday in the Omani coastal city of Salalah. While details have not been finalized, multiple countries have confirmed the meeting is expected to proceed as planned. If held, the talks will underscore the region’s urgency to try to reopen the Strait and de-escalate US-Iran hostilities. (Jinshi)

From 动察 Beating AI Express: Security researcher Shou Chaofan said he recently purchased around 6TB of Fable model call data from a leading Chinese large language model (LLM) proxy. The dataset contained sensitive credentials including SSH keys, VPN configurations, Alibaba Cloud keys, and GitLab tokens. He added that the keys were sufficient to gain access to servers or internal systems of 19 leading Chinese enterprises and 7 Chinese and CIS government-related entities, including Huawei, Xiaomi, Nio, and MiniMax. LLM proxies sit between users and models like Claude, processing all requests and responses, so they have full access to plaintext data. Once developers insert SSH keys, API keys, VPN configurations, and other sensitive data into agent contexts, if proxies store or sell these records, the company’s system keys will leak. This is not Shou’s first warning about proxy risks. In an April paper he co-authored, 428 LLM proxies were tested: 9 actively injected malicious code, 17 used intentionally planted AWS test keys to access AWS services, and 1 directly siphoned ETH from a test wallet. Shou is co-founder of blockchain security firm Fuzzland, with a long focus on vulnerability and supply chain security research. In late March, he also led the discovery that Claude Code 2.1.88’s release package accidentally exposed roughly 500,000 lines of TypeScript source code via source maps.