Critical vulnerability uncovered in Telegram Desktop: A single click on a malicious link can instantly steal any local files and user sessions. The crypto community is urged to update immediately.

Beating AI Express News: Google’s coding agent product Antigravity has launched a Plugin Marketplace, which centrally offers plugins developed by Google and third-party developers. Previously, connecting an agent to external services typically required manual configuration of MCP, API keys, and related commands. Now, users can directly search for and install plugins with one click, and installed plugins are synced across the desktop app and CLI. The first batch of key partner showcases includes Atlassian, Figma, Canva, Datadog, CrowdStrike, Unity, and others. The agent can perform functions such as querying Jira tasks, Confluence documents, and Bitbucket code; reading Figma design drafts to generate code, as well as writing content back to the design canvas; analyzing logs, monitors, and call chains via Datadog to troubleshoot online outages. The Unity plugin allows the agent to directly participate in 3D project development and simulation.

After verifying with OKX officials, the 172 million USDT (valued at approximately $171,846,059) monitored by Whale Alert as being transferred from OKX to an unknown wallet is an internal OKX transfer operation. OKX stated that regarding today’s industry security incident, it has completed a full investigation, found no signs of intrusion, the platform is operating normally, and user assets remain secure.

According to Whale Alert monitoring, 1077 BTC were transferred from an unknown wallet to the OKX exchange, valued at approximately $84.72 million.

According to Yonhap News Agency, a report released by Microsoft Threat Intelligence on the 29th reveals that North Korean hacker groups are leveraging artificial intelligence (AI) to accelerate cyberattacks targeting South Korean users, expanding their tactics beyond customized phishing documents, fake job postings, and identity spoofing to include malicious code development and software supply chain attacks. Microsoft assessed the AI adoption levels of eight North Korea-related hacker groups: three have reached the highest "operationalized" stage, integrating AI into their daily attack workflows; four are in the "acceleration" phase, and one is in the "expansion" phase. The report notes that some groups generated over 100 targeted PDF lure documents for different targets between August and September this year, with cases of producing dozens of documents in just minutes. Between June 8 and 12, fake job offers were sent to AI, blockchain, and cybersecurity professionals using three spoofed companies. Additionally, Microsoft analysts found that North Korean hackers may be using AI programming tools like Cursor to assist with code generation, debugging, and evading detection. North Korea's Reconnaissance General Bureau-affiliated groups "Onyx Sleet" (referred to as Andariel by South Korea) and "Pearl Sleet" have been using the open-source AI penetration testing framework ARTEX in real-world operations since late October. Microsoft concluded that while these groups have boosted attack speed and efficiency through AI, they have not yet achieved fully autonomous attacks, and recommended that enterprises strengthen identity verification for job applicants, phishing protection, and malicious code detection.

Reserve released a statement regarding the Binance hot wallet breach, noting that the stolen RSR tokens have been sold, Reserve’s contracts remain unaffected, and RSR holders do not need to take any action. The attacker stole approximately 3.38 billion RSR from Binance, swapping all of it for 1,856 ETH on Uniswap v3, valued at around $4.1 million.

According to OnchainLens monitoring, trader Long Loyalist deposited 4.9 million USDC into Hyperliquid approximately one hour ago, and placed a buy order for around 9,630 ETH (valued at roughly $20 million). The trader currently holds about 4,860 ETH in long positions (worth ~$10.94 million), with unrealized profit and loss of approximately -$4.63 million across 39 open positions, and historical profit and loss of roughly -$4.29 million.