BP Plc's profit climbed to its highest level in 18 years as soaring refining margins boosted earnings, according to Bloomberg. The earnings tailwind comes as Chief Executive Officer Meg O’Neill seeks to turn around the British energy major.

Grok 4.8 has not been released, and Elon Musk said he does not care about benchmark scores, emphasizing the model’s practical uses instead. According to ChainCatcher, Musk said on October 30 that development had taken longer than expected but promised the new model would not disappoint. On September 14, Musk said Grok 4.8 has 2.5 trillion parameters and uses a new C++ training system. He expected pretraining to finish by the end of that week, followed by reinforcement learning. More than six weeks later, the model is still unreleased. Artificial Analysis found that, at the same xhigh reasoning level, Grok 4.7’s overall intelligence index was two points higher than Grok 4.6’s, rising from 44 to 46. Average output per question increased from about 38,000 tokens to 81,000. Some Cursor community users have also complained that Grok 4.7 uses their quotas faster without delivering a noticeable improvement. In a September interview with CCTV, Musk acknowledged that Grok 4.7 was behind Claude Opus 5.5 and said it might not catch up with leading models until 2027. In October, he proposed having Grok Bot call external models, including Claude, depending on the task, and said Grok 4.8’s high-speed version would handle many simple requests.

According to Jin10, Hon Hai’s chairman said the company has six factory buildings in Houston and sees a need to expand further.

According to Jin10, Bank of Japan Governor Kazuo Ueda said the specific intervals between rate hikes cannot be determined in advance, such as raising rates every few months.

According to CNBC, BP reported $8.5 billion in underlying replacement cost profit, a measure used as a proxy for net profit, for the third quarter on Friday. The result exceeded analysts’ $6.191 billion consensus forecast compiled by LSEG and was up from $2.2 billion a year earlier. Profits nearly quadrupled year over year amid volatile energy markets and high refining margins.

Tokyo Electron forecast operating profit of ¥1.17 trillion for the fiscal year ending next March, 64% higher year over year and above market expectations. According to ChainCatcher, third-quarter operating profit rose to ¥295.4 billion, exceeding the ¥256.1 billion expected by the market.

A malicious version of Anthropic’s Claude Code VS Code extension, version 2.1.313, was published to the Open VSX registry on Oct. 30. According to ChainCatcher, security researcher Paul McCarty, known as 6mile, described the finding in a post on the OpenSource Malware blog. Researchers confirmed the analyzed Open VSX release was malicious and submitted a threat report about the same version on Microsoft’s VS Code Marketplace as a precaution. The extension, identified as [email protected], differed from the legitimate version only in extension.js, where a 66-line loader had been inserted before the normal code. The file runs when VS Code starts and when a Webview opens, so users do not need to start a Claude conversation to trigger it. The loader adds an attacker-controlled SSH key labeled svc-telemetry to users’ SSH configuration, attempts to enable local SSH service, creates a reverse tunnel to 134.209.82.225, establishes persistence on macOS, Linux and Windows, and sends host reconnaissance data over unencrypted HTTP to port 8099. No additional executable files or scripts were downloaded during the injection phase. The affected Open VSX extension is owned by Anthropic employee Igor Kofman, but it is unclear whether his account or another part of the publishing process was compromised. Dean Hardcastle notified Kofman during the incident. Researchers said the source of the analyzed directory has not been established; the findings alone do not prove that Anthropic’s official marketplace or distribution infrastructure was compromised, and the attacker’s identity and infrastructure ownership remain unverified. Recommendations include checking for related file paths, key comments and startup items, blocking ports 22 and 8099 at 134.209.82.225, and rotating credentials accessible to affected accounts from a clean system.

攻击者利用以太坊新特性EIP-7702，诱导币安热钱包签下50条授权，在约3分24秒内扫空167,464枚ETH及63种代币。链上数据指向签名系统遭到渗透，而非私钥直接被盗。

Cryptocurrency exchange HTX is facing mounting regulatory pressure across Europe, with its withdrawal from the United Kingdom following a series of enforcement and sanctions measures targeting the platform and its corporate structure.

如果中心化交易所都无法保证资产安全，那么用户还有必要继续将大量资产交给CEX托管吗？

目前已经有多位业内人士指出该盗窃案件或为朝鲜黑客所为。

发生了什么？币安被盗案的幕后组织是谁？如何实施攻击的？被盗资产有多少被冻结了？

AAVE,DeFi,借贷,流动性池,DeFi资金与RWA抵押品的结合 金色财经,Aave 开放机制，允许专业机构运营借贷交易台。

币安宣布，该事件估计总影响金额约为63亿美元。、值得注意的是，此次事件发生于"黑色十月"网络攻击浪潮期间，AI技术催生新型攻击手段被认为是重要背景因素。

France is moving to expand the international sharing of cryptocurrency transaction data, but the push for greater tax transparency is raising concerns about the security of sensitive investor information in a country already facing a disproportionate number of physical attacks targeting crypto holders.

英特尔,芯片,人工智能,数据,AI芯片供不应求 英特尔却暴跌20% 金色财经,第四季度营收和盈利指引明显低于市场预期。

富途发现自己多年培养的客户，可能正好成了币安的新用户。一个原本不在券商名单里的对手，开始来抢同一门生意。