nGN

[ZachXBT @zachxbt]

1/ How I infiltrated a Chinese organized crime syndicate that has laundered $1B+ across multiple exploits for Lazarus Group.

Posing as a client, I gathered intel that helped action freezes for the Feb 2025 Bybit exploit and attribute illicit activity onchain.

[Qwen @Alibaba_Qwen]

⚡Meet Qwen3.8-Flash, a multimodal MoE and an early preview of the Qwen4 architecture, now open-weight!

The production version Qwen3.8-Flash will be available soon via QwenCloud API at just $ 0.16/1M input tokens and $ 0.47/1M output tokens.

125B parameters + 51B N-gram embeddings, with just 6B activated per token. Unmatched cost-efficiency.

What's new: 🥳
- Next architecture: GDN + QSA hybrid attention, Gated Residual, N-gram Embedding & Muon optimizer, serving as a precursor to the architecture used in Qwen4.
- Dramatically lower training and inference costs: trained at just 1/9 the cost of Qwen3.7-Plus, while outperforming it across the board with especially strong gains in coding and office tasks.
- Strong performance: scoring 58.7 on DeepSWE 1.1, 62.5 on SWE-bench Pro, 73.9 on CoWorkBench, 84.5 on AndroidWorld, and 95.7 on MathVision (with CI).
- 262K native context, extensible to 1M with YaRN.

We’re also releasing the weights for Qwen3.8-Flash-Next, giving the community an early look at the new architecture we’re exploring for Qwen4.🚀

We can't wait to see what you build with Qwen3.8-Flash!👀👇
- Blog: https://t.co/M5hYypFLgJ
- Technical Report: https://t.co/IF0gObIkQO
- Hugging Face: https://t.co/6ow8QVAABt
- ModelScope: https://t.co/tDOn2jNuFG

[gfw.report @gfw_report]

The Great Firewall of China (GFW) today experienced the largest internal document leak in its history. More than 500GB of source code, work logs, and internal communications have been exposed, revealing details about the development and operation of the GFW.

The leak originated from a core technical force — Geedge Networks (with chief scientist Fang Binxing) and the MESA Lab in the Institute of Information Engineering, Chinese Academy of Sciences.

The company not only provides services to local governments in Xinjiang, Jiangsu, and Fujian, but also exports censorship and surveillance technology to countries such as Myanmar, Pakistan, Ethiopia, and Kazakhstan under the “Belt and Road” framework.

Due to the massive volume of material, GFW Report will continue analyzing and updating on this page:
https://t.co/HgzRJbcTls

[ᴍʀᴄʀʏᴘ ㉿ ᴘʀɪᴠ/ᴀᴄᴄ @MrCrypPrivacy]

🚨 #CHATCONTROL FAILS AGAIN 🚨

🟢 AGAINST (9):
🇦🇹 Austria · 🇧🇪 Belgium · 🇨🇿 Czechia · 🇫🇮 Finland · 🇩🇪 Germany · 🇱🇺 Luxembourg · 🇳🇱 Netherlands · 🇵🇱 Poland · 🇸🇰 Slovakia

🔴 IN FAVOR (14):
🇧🇬 Bulgaria · 🇭🇷 Croatia · 🇨🇾 Cyprus · 🇩🇰 Denmark · 🇫🇷 France · 🇭🇺 Hungary · 🇮🇪 Ireland · 🇮🇹 Italy · 🇱🇻 Latvia · 🇱🇹 Lithuania · 🇲🇹 Malta · 🇵🇹 Portugal · 🇪🇸 Spain · 🇸🇪 Sweden

🟡 UNDECIDED (4):
🇪🇪 Estonia · 🇬🇷 Greece · 🇷🇴 Romania · 🇸🇮 Slovenia

👉 The proposal reintroduced by 🇩🇰 Denmark under its EU presidency (July 2025) has failed for the third time

💥 With Germany and Luxembourg joining the opposition, a blocking minority was formed (at least 4 States + 35% of EU population)
📌 Result: no agreement, no vote in October.
Even if Denmark tries again, Europe has once more resisted this absurdity

[Naomi Brockwell priv/acc @naomibrockwell]

This vote told us something big:
Which govts still defend digital rights & which govts want to strip your rights away.

This is your map.

We now know who will protect privacy, and who treats it as a threat. What can we do with this info?

A thread: 1/7

[Reclaim The Net @ReclaimTheNetHQ]

Von der Leyen’s 2025 State of the Union laid out a blueprint for full-spectrum control of digital life in Europe.

Framed as protecting health, democracy, and children, the plan expands censorship, ramps up surveillance, and tightens speech regulation.

[Reclaim The Net @ReclaimTheNetHQ]

Cybersecurity Experts Warn EU Against Chat Control 2.0 Regulation Ahead of Key Votes

https://t.co/DfHnS4WZNZ

[Pirat_Nation 🔴 @Pirat_Nation]

EU CHAT CONTROL DEADLINE - European Member states will vote this Friday (September 12th 2025) to finalise the EU chat control initiative.

Contact your MEP's NOW if you oppose this legislation. More info: Fight Chat Control .eu

[Reclaim The Net @ReclaimTheNetHQ]

Germany just dropped a report that inadvertently shows how dangerous the EU’s new “Chat Control” plan really is.

In 2024, nearly HALF of all child abuse reports sent to German police by US companies like Meta and Google were false alarms...

over 99,000 instances of useless tips based on scanning people’s personal messages and content.

Innocent personal content is being forwarded to police based on faulty algorithms.

And this is under the current system, which is voluntary and doesn’t scan encrypted chats like WhatsApp or Signal.

Now the EU wants to make scanning mandatory for every platform, including "encrypted" ones. That means reading everyone’s messages, all the time, even when there’s no reason to suspect anything.

It would kill private messaging. It would flood police with even more garbage data. And it treats everyone like a criminal just for using a messaging app.

[MartyParty @martypartymusic]

PSA: Supply Chain attack warning from Ledger CTO. Supply chain is where malicious actors get malicious code into the open source build repositories of apps to steal key information when you interact with them.

NOTE: This has nothing to do with blockchains. It is to do with Dapps that use blockchains. I have stressed this for years. Code MUST go onchain. Centralized webservers are very risky. Who will put UI code on chain first???

Use new wallets with small value today until further notice. DO NOT USE YOUR PRIMARY WALLETS WITH DAPPS until this is understood.

Limit interaction with apps for now. Sit on your hands.

[Charles Guillemet @P3b7_]

🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk.

The malicious payload works by silently swapping crypto addresses on the fly to steal funds.

If you use a hardware wallet, pay attention to every transaction before signing and you're safe.

If you don’t use a hardware wallet, refrain from making any on-chain transactions for now.

It’s still unclear whether the attacker is also stealing seeds from software wallets directly at this stage.

Excellent report here: https://t.co/5CtiZJHYsN

[ClarksonsFarm @ClarksonsFarm1]

Repost!

[Pirat_Nation 🔴 @Pirat_Nation]

EU Chat Control: Opposition grows, but support remains strong.

Belgium and the Czech Republic joined the opposition before the crucial September 12 meeting.

[Brave @brave]

If Chrome just killed your ad blocker, switch to Brave.

Brave’s ad blocking is built into the browser itself so it isn’t affected by the Manifest v3 changes that Google is rolling out.

[ZachXBT @zachxbt]

A recent cyberattack on the Central Bank of Brazil services provider C&M resulted in a breach to the reserve accounts of six financial institutions where attackers converted stolen fiat to crypto.

I began working on an initiative that has helped freeze ~$5M across multiple exchanges and blockchains.

A special thanks goes to @tether , @Binance Security Team, @Bitso, @Bybit_Official Compliance Team, & @CFInvestigators.

Collaboration within the private sector is the most effective way to combat illicit activity and push our industry forward.

[PeckShield Inc. @peckshield]

.@GMX_IO has been exploited for ~$42M. The exploiter has bridged ~$9.6M worth of cryptos to #Ethereum.

[GMX 🫐 @GMX_IO]

The GLP pool of GMX V1 on Arbitrum has experienced an exploit. Approximately $40M in tokens has been transferred from the GLP pool to an unknown wallet.

Security has always been a core priority for GMX, with the GMX smart contracts undergoing numerous audits from top security specialists. So, in this hands-on-deck moment, all core contributors are investigating how the manipulation occurred, and what vulnerability may have enabled it.

Our security partners are also deeply involved, to ensure we gain a thorough understanding of the events that occurred and minimise any associated risks as quickly as possible. Our primary focus is on recovery and pinpointing the root cause of the issue.

Actions taken:

Trading on GMX V1, and the minting and redeeming of GLP, have been disabled on both Arbitrum and Avalanche to prevent any further attack vectors and protect users from additional negative impacts.

Scope of the vulnerability:

Please note that the exploit does not affect GMX V2, its markets, or liquidity pools, nor the GMX token itself.

Based on the available information, the vulnerability is limited to GMX V1 and its GLP pool.

As soon as we have more complete and validated information, a detailed incident report will follow.

[Officer's Notes @officer_secret]

COINBASE DATA LEAK!

@coinbase : Cyber criminals bribed and recruited a group of rogue overseas support agents to steal Coinbase customer data to facilitate social engineering attacks. These insiders abused their access to customer support systems to steal the account data for a small subset of customers. We will reimburse customers who were tricked into sending funds to the attacker. We’re cooperating closely with law enforcement to pursue the harshest penalties possible and will not pay the $20 million ransom demand we received. Instead we are establishing a $20 million reward fund for information leading to the arrest and conviction of the criminals responsible for this attack.

[Naomi Brockwell priv/acc @naomibrockwell]

This case could change everything.
The IRS seized 14000 records—no warrant—because a 1970s rule says you have no privacy if a 3rd party holds your data.

It's absurd: The internet is built on 3rd parties.

At last we're pushing back against overreaching surveillance.