Justin Elze✓

Thariq @trq212

There’s 100% a kind of mania you can get into with coding agents, where it feels like you’re getting a lot done and working all the time but nothing is really happening. I think it's often a form of avoidance of something else in life.

Binance @binance

Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified. The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far. Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete. As an immediate precaution, Binance has: - temporarily suspended deposits and withdrawals while security checks are completed; - revoked the affected address authorisation; - engaged law enforcement and blockchain intelligence partners to trace and recover funds. Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice. Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.

a16z @a16z

In a single year, AI has rewritten the security priority list for CISOs. Attackers are moving faster. Bain estimates AI compresses a typical cyberattack from about four weeks to about 18 hours, and models keep getting better at finding and exploiting weaknesses. There's also more to protect, with employees shipping apps they couldn't have built a year ago and agents getting access to source code, documents, and production systems. In a survey of 100 CISOs at companies with 1,000+ employees, all seven of the most-selected 2027 priorities involve AI. The biggest jumps since 2026: - Internal AI agent security (+28 pts) - AI SOC (+26 pts) - AI offensive security (+24 pts) - AI code security (+23 pts) - AI vulnerability remediation (+22 pts) Last year's staples: - Exposure & vulnerability management (-21 pts) - SIEM / security data (-18 pts) - Privileged access management (-18 pts) From a16z's @OwenColby and @steph_zhang on The New Security Agenda:

Jun Song @jun_song

After crypto exchanges fall, banks are next. Black hat hackers are getting ready to attack them with AI swarms. In fact, they are already running live tests on banks around the world. There is no such thing as a system without flaws, and no asset is truly safe anymore. They are not just going after the money. The plan is to attack the banks and shut down the whole internet at once. Attacking is always way easier than defending. Even with AI swarms on defense, defenders have to block every single angle. Attackers just need to find one open crack. Not trying to be a doomer here. Just looking at what is already playing out in the wild.

Adel Ka @0x4D31

this is how i expected TAs to exploit php2shell, not some universal exploit opportunistically popping every vulnerable server with a single click.

Marc-André Moreau @awakecoding

Snagit is slow and unstable - I like the features, but it fails on me repeatedly. Where is the vibe coded replacement in Rust that's fast and stable?

Tony Chang ☁️ @tonychang430

An engineer on our team used roughly $10,000 in @claudeai API credits in a MONTH. So we moved to using Claude Team subscriptions instead at roughly $100–$200 per seat, with each of us using 3 - 7 subscriptions. This doesn't make any sense 💀

WIRED @WIRED

Sources tell WIRED that an Accenture employee’s personal Claude agent ran on a DOD network for two months before it was identified and the vulnerability could be patched.

Haifei Li @HaifeiLi

It’s quite obvious now that the AI frontier labs have been pushing very hard on vulnerability discovery, from acquiring world-class vulnerability researchers to training specific vuln-discovery models. However, I don’t think from a business point of view, vulnerability discovery could be a long-term, big source of revenue, and it’s just a very small part of the entire cybersecurity business. So why do they do that? What am I missing?

Marcus Hutchins @MalwareTechBlog

Life is a lot easier once you stop seeing threat actors as hackers who want to break into systems by any means possible, and start seeing them as businesses with well defined business processes. A bakery isn't going to start making dog food because there's a dog food shortage. ClickFix and Phishing actors aren't going to drop everything to vibecode exploits just because a critical CVE came out. The fact that the only actors exploiting this are the actors whose MO is exploiting things... isn't a coincidence. It's entirely predictable if you understand threat actor behavior.

a16z @a16z

In a single year, AI has rewritten the security priority list for CISOs. Attackers are moving faster. Bain estimates AI compresses a typical cyberattack from about four weeks to about 18 hours, and models keep getting better at finding and exploiting weaknesses. There's also more to protect, with employees shipping apps they couldn't have built a year ago and agents getting access to source code, documents, and production systems. In a survey of 100 CISOs at companies with 1,000+ employees, all seven of the most-selected 2027 priorities involve AI. The biggest jumps since 2026: - Internal AI agent security (+28 pts) - AI SOC (+26 pts) - AI offensive security (+24 pts) - AI code security (+23 pts) - AI vulnerability remediation (+22 pts) Last year's staples: - Exposure & vulnerability management (-21 pts) - SIEM / security data (-18 pts) - Privileged access management (-18 pts) From a16z's @OwenColby and @steph_zhang on The New Security Agenda: