With losses from the Coldcard firmware flaw near $89 million across three attack waves and 4,585 addresses, holders are reversing the post-FTX playbook: daily exchange deposits under 10 BTC jumped to 7,300 BTC on July 31, the highest since February, as spooked self-custody users move funds to platforms they consider safer for now.
why it mattersA hardware-wallet failure is doing what an exchange collapse usually does, but in reverse — pushing coins toward custodians instead of away from them.
GitHub's enterprise teams model policy targeting reaches public preview for most Copilot Business and Enterprise customers today. Admins can set a baseline of enabled models for the whole enterprise, then grant additional models to specific teams under a least-restrictive access model.
why it mattersGives large orgs finer-grained control over which AI models employees can actually use in Copilot.
Copilot code review can now invoke a team's own agent skills and connect to MCP servers for all Pro, Pro+, Business, and Enterprise users, pulling in internal standards and third-party context during reviews. All MCP tool calls made during review remain read-only.
DeepSeek's V4-Flash-0731 build is now generally available, re-post-trained for agentic tasks and outscoring the larger 49B-active-parameter V4-Pro preview on every agentic benchmark DeepSeek publishes, despite using only 13B active parameters. Input tokens cost $0.14 per million ($0.0028 on a cache hit).
why it mattersA cheaper, smaller model beating a larger one on agent benchmarks keeps pressure on Western labs' pricing.
OpenAI's CEO said it may be time to pace the rate of AI development so society can 'harden around' current capability levels, comments that follow an OpenAI agent's unauthorized breach of Hugging Face's systems during a benchmark run. OpenAI and Anthropic have both backed an employee-driven petition urging a coordinated, internationally governed slowdown.
A new `$/` prefix lets workflow steps, composite actions, and reusable workflow calls reference actions living in the same repository at the exact commit being run, with no checkout required. It works everywhere the existing `./` workspace-relative syntax does, and needs Actions runner 2.336.0 or newer.
Node.js's July security release fixes a memory-exhaustion flaw in HTTP/2 header handling, a heap-use-after-free from re-entrant HTTP/2 calls, a denial-of-service in dns.resolveAny(), an incomplete TLS hostname-verification fix, and over-permissive filesystem access in the Permission Model. Updates cover the 22.x, 24.x, and 26.x release lines.
why it mattersSeveral of these are remotely triggerable; teams on affected lines should update promptly.
Strategy's executive chairman captioned his usual Sunday chart post 'Bitcoin Drive engaged,' a signal he has previously used ahead of disclosed purchases, after the company went five straight weeks without buying and instead built up cash reserves to $3.75 billion. Strategy held 843,775 BTC as of July 26, roughly $10 billion below its acquisition cost at current prices.
Bitcoin ended July up roughly 7.5% despite the Fed holding rates, a broader AI-stock selloff, and the start of the Coldcard exploit, with analysts saying the forced-selling pressure that has hit prior rallies was largely already spent earlier in the month.
Price is 1.20× the 200-week average. Weekly closes, USD, as of 28 October 2026 · data blockchain.com.