🇰🇷LATEST: South Korea's largest bank, KB Kookmin Bank, is launching @jpmorgan's Kinexys blockchain in August to enable near-instant U.S. dollar cross-border payments. The service will initially support dollar remittances across 10 countries, using Kinexys, JPMorgan's blockchain platform that has already processed more than $4 trillion in institutional transactions.

Fable 5.1 one-shot this Dark Souls meets Diablo game. All code, 222 KB total, zero asset files. Every texture, model and sound effect is generated procedurally. The whole sfx system is 7 KB of Web Audio synthesis. It nailed mechanics I only named in text: stamina, dodge rolls, barbarian skills, and a punishing Souls-style boss. The soul pickups and death animations came out way smoother than I expected. What gets me is how much it infers from a few genre references, with no screenshots or video to go on. Reaching this level used to take dozens of prompts in Sol or Opus 5. Anyone with taste can now make really fun games in the browser.

A German teenager posted a frustrated tweet cursing out Olaf Scholz while his 37.9 GB Fortnite update crawled along at 173 KB/s, a download that would have taken over 60 hours to complete. The tweet had just 503 views. German police later opened criminal proceedings against him for insulting a politician. The case was dropped after he deleted the post. A year later he posted the official letter.

🚨 Threat Intelligence | The StealC Info-Stealing Chain Behind the Qwen Impersonation Repository SlowMist Security Team identified a #GitHub# repository impersonating local quantized weights for Qwen 3.8 27B. A real Q4_K_M 27B package should exceed 16 GB. The asset delivered was only 487 KB — no GGUF weights, just three files: Application.cmd, a renamed LuaJIT interpreter, and an obfuscated Lua script disguised as cert.txt. The official #Qwen# project was not compromised. The repo kept the look of a normal offline model project, while the malicious ZIP sat in assets/. After deobfuscation, the script collects host data, takes a screenshot, and POSTs them to C2. When the hardcoded server fails, it reads a fallback C2 from a Polygon contract via eth_call, so operators can rotate infrastructure with a single on-chain transaction. Preserved C2 responses then delivered an inner payload we attribute to #StealC#, targeting: 🔹 Browser logins, cookies, and history — including a Chrome App-Bound Encryption bypass 🔹 Email, WinSCP, and Steam credentials 🔹 Wallet-related files and extension data, dispatched by server-side tasks MistEye reconstructed the multi-stage chain and compared 29 similar ZIPs across 23 repositories using the same Lua delivery stack. Between two collection dates, repositories, filenames, the outer PE, and the AES key had already rotated. A 27B model that downloads in 487 KB is not a model. Inspect asset size and unpack downloaded packages before running them. Read the full analysis 👇

30-YEAR TREASURY YIELD BECOMES MARKET’S NEW FEAR GAUGE The US 30-year Treasury yield has become a key market focus as concerns over government debt and fiscal credibility intensify. A Bloomberg survey shows 66% expect the 10-year yield to exceed 5% this year. But KB Securities says investors are too pessimistic. It argues policymakers still have tools to contain yields, including Treasury buybacks, fiscal tightening, Operation Twist and bank deregulation.