Wu Shuo learned that security researcher 23pds warned that over the past month, phishing attackers have begun adopting new social engineering and technical tactics to launch attacks against cryptocurrency users. Related cases have been disclosed, and users are advised to remain vigilant and avoid clicking on suspicious links or signing dubious transactions. Additionally, researcher Adam Chester disclosed a privilege escalation and command execution vulnerability found in Anthropic's Claude Code. Attackers can achieve command execution without user authorization. The vulnerability is identified as CVE-2025-64755, and related PoC has been made public. This issue is noted to be similar to a previously disclosed vulnerability in the Cursor tool.