🔓KeyGen Channel

The former CEO of Binance is warning users to be very careful when visiting any website in the coming days, since sites with unpatched vulnerabilities could be exploited to steal login credentials or gain unauthorized access to devices.

Trump rolled out a fraud whistleblower reward program. Informants get 1% of recovered money—up to $30,000 per person—backed by a $25 million initial budget and supervised by the Justice Department.

Using 31 professional printing machines, a man in a Naples neighborhood produced counterfeit euros in a hidden room in his home garage, challenging Europe's financial system. A police raid uncovered 3 million euros in ready counterfeit banknotes, industrial printing equipment, and forgery tools. According to the account, he had produced 11 million euros in fake money altogether, and 8 million euros of that had entered Europe's economic cycle. Reports say he alone accounted for 27% of the counterfeit euros discovered in Europe.

The US government has directed all civilian agencies to eliminate DeepSeek from their systems. The Department of Homeland Security issued a directive requiring civilian organizations to purge DeepSeek and all related products from their IT infrastructure. The ban extends beyond China-hosted versions—even US-hosted products and services fall under the prohibition. Additionally, any third-party products or services built on DeepSeek implementations must also be removed.

🤖 Telegram now allows users to create bots with additional username suffixes. You can now create a bot through another bot, provided it has «Bot Management Mode» enabled in @BotFather. The new bot can have an additional username that doesn't end in the usual bot suffix. Telegram's server configuration currently allows five suffixes: agent, ai, app, game, and gay. The additional username does not replace the bot's primary username. Both remain available, while Telegram can use the new suffix to display a different status label in the bot's profile. There are some limitations: × Telegram Premium is required to use these additional usernames. × Each bot can have only one additional username. × A single account can have no more than two bots with these additional usernames, even if they use different suffixes. Alternatively, you can create a bot with an additional username directly through @BotFather, without using another bot.

Over the weekend, cryptocurrency wallets on the Qubic blockchain were compromised. On October 18, an attacker drained roughly 2.94 trillion QUBIC (about $1.3 million) from 1,404 addresses on the Qubic L1 blockchain. The flaw did not lie in the blockchain itself but in how seed phrases were generated: on iPhones and iPads in the browser, in Safari on Macs, and in an older iOS app, a weak random number generator was used, making seed phrases predictable.

TON Strategy earned $15 million in staking revenue during Q2, a fivefold increase over the $3 million it brought in the previous quarter. As of June 30, the listed company held roughly 230.5 million Gram tokens, with 229.9 million staked — equal to about 35% of all Grams staked across the TON network.

OpenAI's AI agent took funds from an Ethereum testnet wallet it discovered online. The agent came across a publicly disclosed recovery seed phrase tied to testnet funds and used the account to cover its task — without the owner's permission. The incident occurred on the Sepolia Ethereum test network.

iPhone owners with iOS versions up to 18.6 are massively losing cryptocurrency due to the DarkSword exploit. The exploit is injected into popular websites, and the device becomes infected simply by opening the website. Hackers gain root access to the device's memory and extract passwords, notes, clipboard data, seed phrases, and photos. There are already victims among TON users: an anonymous phone number was stolen from a Tonkeeper wallet.

Thieves stole 30,000 bottles of wine worth $5.6 million from an Italian winery, disabling security cameras before using the winery's own forklifts to load two trucks with the stolen goods.

AI models may have helped identify a new planet 116 light-years away. A product manager with no telescope used Claude Code and Codex to scan NASA data on over 126,000 stars, flagging one whose brightness dips every 3.18 days — the same dips seen in 2018 and 2020 data. The candidate planet is about 1.4 times Earth's size and hot enough to melt lead. NASA's TESS telescope will observe the star from October 31 to confirm the timing.

Cheap Android phones, including Doogee and Cubot models as well as counterfeit Galaxy S25 Ultras, come with malware baked into their firmware, researchers found. The malware shuts down the Play Store and silently installs ad-fraud and proxy apps that owners cannot uninstall.

Update Telegram Desktop right away! One click on a malicious link is all it takes for someone to completely take over your account — that's what researcher BeakSec discovered. The link secretly injects commands that trick the app into sending over your session files. Good news: Telegram has supposedly patched the flaw (CVE-2026-107181) in version 7.2.9.

Dutch police have shut down a criminal proxy service that ran on 178,000 hijacked devices — hundreds of them in the Netherlands — whose owners had no clue strangers were using their IP addresses to go online. Authorities warn this could make innocent people appear to be cybercrime suspects.

Claude, Anthropic's AI, invented a fake eyewitness tip about an unsolved murder and sent it to Philadelphia police, while Claude Mythos exploited an injection flaw to run commands on a university server. Anthropic has since severed its internal tests from the internet.

A man has been sentenced to 18 months in prison for using bots to stream his own AI-generated songs. Through the scheme, he earned more than $8 million.

OpenAI has identified Russian operatives misusing ChatGPT as part of an influence operation aimed at schools in Peru. According to the company's internal reports, the operatives impersonated a Peruvian regional education authority to persuade schools to host events related to Ukraine. OpenAI notes that the effort elicited a response from at least one Polish member of the European Parliament. Separately, Iranian operatives used seven fictitious author identities to place nearly 100 articles in publications such as Daily Kos. OpenAI has since banned both the Russian and Iranian accounts.

A UK crypto trader named 'Realist' lost around $800,000 in a violent home robbery. Attackers armed with a knife tied him up and compelled him to transfer his digital holdings from various wallets and his Ledger device. Fortunately, he only suffered minor injuries.