The future won’t wait for you.

@TFTC21

High signal Bitcoin, privacy, and AI news. No filler. Sign up for The Commoner: tftc.io/commoner

@TFTC21

AI just made your bank's database cheaper to rob. A threat actor used ARTEX, a Chinese open-source AI pen-testing tool running on DeepSeek v4.1-flash, along with Claude Code sessions on GLM-5.3 and Grok 4.6, to breach at least nine South Korean banks. More than 68,000 people had their personal financial data stolen. At Shinhan Bank alone, loan-application data for 25,000 customers was taken: names, phone numbers, annual incomes, loan limits, and for 66 of them, national ID numbers. The attacker wasn't sophisticated. CrowdStrike found open directories the actor left exposed on their own infrastructure, stuffed with Claude Code session histories and Chinese-language pentesting instructions. They asked Claude how to find Korean Telegram groups that buy breach data, then asked it to write them a security-researcher résumé. CrowdStrike assesses with moderate confidence the actor is a Chinese speaker and financially motivated but hasn't established who was behind it. Nobody cracked any encryption. They just had AI try random values on a loan-status page until one opened. Tedious grunt work you hand off to a machine. South Korea's president said it plainly: "We have now reached a point where AI can make hacking easy for even those without special skills." These databases are honeypots. Nothing shows a KYC rule caused this specific breach, but KYC/AML policies push companies to collect and hoard exactly the kind of data that got stolen. The cost of raiding these targets is collapsing. The cost of defending them isn't. Hold your own keys. Hand over as little of yourself as possible. End KYC/AML.

@TFTC21

Swiss auction site Ricardo just exposed the names, addresses, and phone numbers of 890,000 users. Emails and passwords weren't hit, but that's a lot of personal data out in the wild from a single vulnerability on one platform. Owner SMG confirmed it in a press release and has filed a criminal complaint.

@TFTC21

Ledger users are reporting drained wallets, and @SpecterAnalyst traced the theft addresses to inflows from hundreds of victims across Bitcoin, Ethereum and TRON. Total losses: $86M+. The attack vector hasn't been confirmed yet.

@TFTC21

The 5 biggest stocks in the S&P 500 are now worth as much as the bottom 434 combined. That's the most concentrated the index has been since at least 1991.

@TFTC21

Excess cash in the euro-area banking system has fallen to about €2 trillion, the lowest since 2020. It topped €4.5 trillion in 2022.

@TFTC21

RFK Jr. breaks down how the American health insurance system is a scam. A hip replacement costs $17,900 at one hospital and $74,000 at a nearby hospital for the exact same surgery.

@TFTC21

Plato's Apology turned into a 16-bit video summary using ChatGPT, music included.

@TFTC21

Bitcoin is money without rulers.

@TFTC21

Anthropic launched the "Cyber Mission," a long-term effort to secure critical infrastructure and open-source software using its frontier AI models. The initiative starts with a Critical Infrastructure Defense Program backed by 11 founding partners including CrowdStrike, Palo Alto Networks, Dragos, and Rockwell Automation. Anthropic will deploy Claude models, on-site engineers, and threat research to help defend the operational technology behind power grids, water systems, and transportation networks. These systems were built to last decades and often can't be taken offline to patch, leaving known vulnerabilities unresolved for years while state-sponsored adversaries establish footholds. Alongside that, Anthropic is launching OSS Scanner, a free opt-in service that runs regular security scans on open-source projects using Claude Mythos. The effort builds on Project Glasswing and expands their Cyber Verification Program to give more defenders access to their most capable models. anthropic.com/news/anthropic…

@TFTC21

Standard Chartered Bank announced plans to provide custody services for Bitcoin and digital assets in Singapore.

@TFTC21

Jason Calacanis on the White House Super Intelligence Summit: "Where's the teacher? Where's the teenager going into college? Where's the plumber?"

@TFTC21

High signal Bitcoin, privacy, and AI news. No filler. Sign up for The Commoner: tftc.io/commoner

@TFTC21

AI just made your bank's database cheaper to rob. A threat actor used ARTEX, a Chinese open-source AI pen-testing tool running on DeepSeek v4.1-flash, along with Claude Code sessions on GLM-5.3 and Grok 4.6, to breach at least nine South Korean banks. More than 68,000 people had their personal financial data stolen. At Shinhan Bank alone, loan-application data for 25,000 customers was taken: names, phone numbers, annual incomes, loan limits, and for 66 of them, national ID numbers. The attacker wasn't sophisticated. CrowdStrike found open directories the actor left exposed on their own infrastructure, stuffed with Claude Code session histories and Chinese-language pentesting instructions. They asked Claude how to find Korean Telegram groups that buy breach data, then asked it to write them a security-researcher résumé. CrowdStrike assesses with moderate confidence the actor is a Chinese speaker and financially motivated but hasn't established who was behind it. Nobody cracked any encryption. They just had AI try random values on a loan-status page until one opened. Tedious grunt work you hand off to a machine. South Korea's president said it plainly: "We have now reached a point where AI can make hacking easy for even those without special skills." These databases are honeypots. Nothing shows a KYC rule caused this specific breach, but KYC/AML policies push companies to collect and hoard exactly the kind of data that got stolen. The cost of raiding these targets is collapsing. The cost of defending them isn't. Hold your own keys. Hand over as little of yourself as possible. End KYC/AML.

@TFTC21

Swiss auction site Ricardo just exposed the names, addresses, and phone numbers of 890,000 users. Emails and passwords weren't hit, but that's a lot of personal data out in the wild from a single vulnerability on one platform. Owner SMG confirmed it in a press release and has filed a criminal complaint.

@TFTC21

Ledger users are reporting drained wallets, and @SpecterAnalyst traced the theft addresses to inflows from hundreds of victims across Bitcoin, Ethereum and TRON. Total losses: $86M+. The attack vector hasn't been confirmed yet.

@TFTC21

The 5 biggest stocks in the S&P 500 are now worth as much as the bottom 434 combined. That's the most concentrated the index has been since at least 1991.

@TFTC21

Excess cash in the euro-area banking system has fallen to about €2 trillion, the lowest since 2020. It topped €4.5 trillion in 2022.

@TFTC21

RFK Jr. breaks down how the American health insurance system is a scam. A hip replacement costs $17,900 at one hospital and $74,000 at a nearby hospital for the exact same surgery.

@TFTC21

Plato's Apology turned into a 16-bit video summary using ChatGPT, music included.

@TFTC21

Bitcoin is money without rulers.

@TFTC21

Anthropic launched the "Cyber Mission," a long-term effort to secure critical infrastructure and open-source software using its frontier AI models. The initiative starts with a Critical Infrastructure Defense Program backed by 11 founding partners including CrowdStrike, Palo Alto Networks, Dragos, and Rockwell Automation. Anthropic will deploy Claude models, on-site engineers, and threat research to help defend the operational technology behind power grids, water systems, and transportation networks. These systems were built to last decades and often can't be taken offline to patch, leaving known vulnerabilities unresolved for years while state-sponsored adversaries establish footholds. Alongside that, Anthropic is launching OSS Scanner, a free opt-in service that runs regular security scans on open-source projects using Claude Mythos. The effort builds on Project Glasswing and expands their Cyber Verification Program to give more defenders access to their most capable models. anthropic.com/news/anthropic…

@TFTC21

Standard Chartered Bank announced plans to provide custody services for Bitcoin and digital assets in Singapore.

@TFTC21

Jason Calacanis on the White House Super Intelligence Summit: "Where's the teacher? Where's the teenager going into college? Where's the plumber?"