Cursor Extension Store Poisoned: SSH Backdoor Implanted in Claude Code, Affecting Up to 5,000 Users

CZ stated in a post that preliminary estimates put losses from Binance’s recent attack at over $6 billion, with roughly $3 billion in assets already frozen. The exchange’s SAFU Fund is valued at around $1 billion, leaving a remaining funding gap of approximately $2 billion. CZ added that Binance’s holdings of SPCX stock alone are worth over $1 billion; while the remaining gap represents a significant loss, it remains within controllable limits. Earlier, crypto analyst 0xngmi estimated the loss at roughly $1 billion, based on Binance’s total custodial assets and frozen assets, accounting for just 0.69% of the exchange’s total custodial assets. In response, CZ noted the actual loss may be slightly higher than that estimate, but Binance will cover all losses.

Elon Musk reacted with an "awkward" emoji in discussions related to the Binance security incident. CZ responded to this, stating that while he has great respect for Musk, now is not the time for jokes and asked Musk to stop. Additionally, CZ noted that Binance invested $500 million when Musk acquired Twitter, and the SPCX shares held from this investment are now worth over $1 billion, expressing hope that Musk will provide some support.

Beating AI Express News: Elon Musk’s brain-computer interface (BCI) firm Neuralink has unveiled a new feature—users only need to mentally utter “Hey Neuralink” and describe their desired task, and the Grok Agent will autonomously operate a computer without manual input. Neuralink engineers recently visited the home of an amyotrophic lateral sclerosis (ALS) patient, spending 72 consecutive hours developing and testing the new feature. Beyond the Grok Agent prototype, the team also rolled out automatic speech intent recognition, brain signal input, and iPhone calling capabilities. The patient can generate speech via the BCI to make calls with his wife, and even place orders at a coffee shop. Two days ago, Neuralink released early results from its speech restoration trial: an ALS patient achieved 75 English words per minute with a 5.8% word error rate in the first week of use. Musk predicts that BCI information output speed will far outpace human speech or typing rates in the coming years.

According to ChosunBiz, multiple ransomware attacks targeting Synology Network-Attached Storage (NAS) devices have recently emerged in South Korea. Attackers exploited vulnerabilities in Synology’s DiskStation Manager (DSM) system to infiltrate the devices, encrypting users’ stored photos, files and other data, with affected files appended with the “.L0CK3D” suffix. The attackers demand victims pay 0.036960 BTC (approximately $2,952, or 4 million South Korean won) within 5 days to purchase a decryption tool called “C3RB3R DECRYPTOR”; ransom will double to 0.073920 BTC (about $5,904, or 8 million South Korean won) if payment is not made by the deadline. Chinese cybersecurity firm 360 analyzed that the attackers likely exploited two DSM vulnerabilities disclosed by Synology in September this year—CVE-2026-13639 and CVE-2026-13684—to breach devices, using a ransomware variant named C3RB3R to encrypt files. Both vulnerabilities allow external attackers to read or modify files without logging in, each carrying a CVSS severity score of 9.8 out of 10. Synology stated the attacks targeted devices running outdated DSM systems, advising users to immediately upgrade to the latest version. For already infected devices, it recommended disconnecting from the network or powering off, and restoring data via prior backups or snapshots. Synology has not yet released a decryption tool, recovery cost support, or compensation plan. The Korea Internet & Security Agency (KISA) has been receiving victim reports since around October 28, and is preparing to provide technical support, but has not disclosed specific victim scale or incident response details. The report notes the actual scale of losses from the attacks remains unclear, and work files and backup data on enterprise NAS devices may also be impacted.

According to monitoring by Tradingbeats, an address starting with 0x15a liquidated $100 million worth of BTC and ETH long positions on Hyperliquid, realizing a profit of $17.78 million. The address subsequently opened a short position of 20,000 ETH at $2,228, valued at $44.6 million. The address opened long positions of 1,000 BTC at $62,353 and 10,000 ETH at $1,762 in early July 2026, holding the positions for nearly four months.

CryptoQuant CEO Ki Young Ju posted that the Coinbase Premium Index has fallen to its lowest level in four years. The last time this metric hit such a low was in November 2022, following the FTX collapse, when Bitcoin also reached a local bottom. Ki Young Ju believes that current market bearish sentiment has reached a notable level, which could instead signal a bullish turn.