https://www.ghostdrive.com/News Updates from the DRIVE 369 DAO: releases, guides and postmortems. en https://www.ghostdrive.com/News/trezor-implants-cryptobilishttps://www.ghostdrive.com/News/trezor-implants-cryptobilisSat, 14 Nov 2026 12:00:00 GMTSecurityTrezor says hidden boards copied recovery words on three Safe 5 devices bought from one reseller. What is proven, and what owners should do. https://www.ghostdrive.com/News/ai-agents-safety-report-2026https://www.ghostdrive.com/News/ai-agents-safety-report-2026Sat, 14 Nov 2026 12:00:00 GMTLearnThe International AI Safety Report 2026 says agents carry heightened risk because they act on their own. What it says, and four rules for agents you run. https://www.ghostdrive.com/News/mcp-before-you-connecthttps://www.ghostdrive.com/News/mcp-before-you-connectSat, 14 Nov 2026 12:00:00 GMTAcademyMCP lets an AI call tools. The spec says a human should be able to deny each call. Five checks before you connect a server, and one design flaw to know. https://www.ghostdrive.com/News/vote-in-the-dao-five-stepshttps://www.ghostdrive.com/News/vote-in-the-dao-five-stepsSat, 14 Nov 2026 12:00:00 GMTDAORead every proposal without a wallet, then vote on the testnet in five steps: read, connect, free test fees, a voice, your vote. 369 proposals are open. https://www.ghostdrive.com/News/dao-update-2https://www.ghostdrive.com/News/dao-update-2Sat, 14 Nov 2026 12:00:00 GMTDAOThe first community proposal was adopted. The week in numbers: 327 pull requests merged, 44 votes cast, 591 members joined, and the next question. https://www.ghostdrive.com/News/what-a-transfer-costs-12-chainshttps://www.ghostdrive.com/News/what-a-transfer-costs-12-chainsSat, 14 Nov 2026 12:00:00 GMTLearnWe measured a simple transfer on 11 chains and a USDT transfer on Tron. Most cost under one cent; Bitcoin and Tron USDT do not. Method, table and limits. https://www.ghostdrive.com/News/369-ledger-use-caseshttps://www.ghostdrive.com/News/369-ledger-use-casesSat, 14 Nov 2026 12:00:00 GMTLearnHow a company, a clinic or a public body could prove a record existed without publishing it, what 369 Ledger supports today, and what it never proves. https://www.ghostdrive.com/News/wfx-loot-github-secret-stealerhttps://www.ghostdrive.com/News/wfx-loot-github-secret-stealerFri, 13 Nov 2026 12:00:00 GMTSecurityStolen GitHub credentials pushed a secret stealer into CI workflows. How to check your repositories and what to rotate first. https://www.ghostdrive.com/News/369-ledger-private-chain-livehttps://www.ghostdrive.com/News/369-ledger-private-chain-liveFri, 13 Nov 2026 12:00:00 GMTTestnetA private Besu chain with five validators, a block every 2 seconds, zero gas. What it records, who runs it, and what it does not prove. https://www.ghostdrive.com/News/what-goes-on-a-chainhttps://www.ghostdrive.com/News/what-goes-on-a-chainFri, 13 Nov 2026 12:00:00 GMTLearnGhostdrive records fingerprints and proofs on two chains, never your files. What each chain holds, the problems it solves, and who sees what. https://www.ghostdrive.com/News/black-october-explainedhttps://www.ghostdrive.com/News/black-october-explainedThu, 12 Nov 2026 12:00:00 GMTSecurityBlack October is a press label for two separate stories: a cluster of critical flaws, and 16 AI platforms hit since Oct 4. What is proven, and what is not. https://www.ghostdrive.com/News/academy-protect-ai-api-keyshttps://www.ghostdrive.com/News/academy-protect-ai-api-keysThu, 12 Nov 2026 12:00:00 GMTAcademyTwo stolen AI keys ran up more than $100,000 in model calls. Six habits to limit the damage if a platform you use loses your keys. https://www.ghostdrive.com/News/how-often-are-we-attacked-2026https://www.ghostdrive.com/News/how-often-are-we-attacked-2026Thu, 12 Nov 2026 12:00:00 GMTSecurityNo single number counts cyberattacks. Six named measures, from FBI complaints to DDoS and leak sites, turned into per-hour and per-minute rates. https://www.ghostdrive.com/News/php2shell-three-weeks-onhttps://www.ghostdrive.com/News/php2shell-three-weeks-onThu, 12 Nov 2026 12:00:00 GMTSecurityPHP runs about 69% of websites with a known language, not 80%. What the reports prove about the PHP flaws: exposed, scanned, exploited and compromised. https://www.ghostdrive.com/News/academy-are-you-already-breachedhttps://www.ghostdrive.com/News/academy-are-you-already-breachedThu, 12 Nov 2026 12:00:00 GMTAcademyIntruders now stay a median of 14 days before anyone notices. Eight checks a company can run this week, and what to do if one of them hits. https://www.ghostdrive.com/News/academy-first-24-hourshttps://www.ghostdrive.com/News/academy-first-24-hoursThu, 12 Nov 2026 12:00:00 GMTAcademyIsolate, preserve, call out of band, and know the clocks: 24 hours under NIS2, 72 hours under GDPR, four business days for US listed companies. https://www.ghostdrive.com/News/academy-patch-triage-ai-erahttps://www.ghostdrive.com/News/academy-patch-triage-ai-eraThu, 12 Nov 2026 12:00:00 GMTAcademyExploits often arrive before the patch. How to decide what to fix first: exposure, the CISA exploited list, and the rules in CISA directive BOD 26-04. https://www.ghostdrive.com/News/academy-know-what-you-exposehttps://www.ghostdrive.com/News/academy-know-what-you-exposeThu, 12 Nov 2026 12:00:00 GMTAcademyAbout 29 million PHP servers and countless admin panels face the internet. How to find your own exposed systems before an attacker does. https://www.ghostdrive.com/News/academy-hunt-after-patchinghttps://www.ghostdrive.com/News/academy-hunt-after-patchingThu, 12 Nov 2026 12:00:00 GMTAcademyA fix does not remove a web shell planted before it. How to hunt back to the first exploitation date, using the PHP2Shell case as the example. https://www.ghostdrive.com/News/academy-agents-guardrailshttps://www.ghostdrive.com/News/academy-agents-guardrailsThu, 12 Nov 2026 12:00:00 GMTAcademySix governments told organisations how to adopt agentic AI in May 2026. Ten controls to set before an agent gets access, with the sources. https://www.ghostdrive.com/News/academy-cloudflare-ai-securityhttps://www.ghostdrive.com/News/academy-cloudflare-ai-securityThu, 12 Nov 2026 12:00:00 GMTAcademyCloudflare offers MCP servers, an assistant and security checks. How to let an agent help set them up without handing it the keys to your account. https://www.ghostdrive.com/News/academy-identity-admin-accountshttps://www.ghostdrive.com/News/academy-identity-admin-accountsThu, 12 Nov 2026 12:00:00 GMTAcademyStolen access is a top entry point and 46% of human logins used leaked credentials. Rules for admin accounts, MFA and sessions in a company. https://www.ghostdrive.com/News/academy-backups-ransomwarehttps://www.ghostdrive.com/News/academy-backups-ransomwareThu, 12 Nov 2026 12:00:00 GMTAcademyRansomware is in 48% of breaches. What CISA says a backup must be: offline or locked, tested, and rebuildable, with a restore drill. https://www.ghostdrive.com/News/academy-secrets-rotationhttps://www.ghostdrive.com/News/academy-secrets-rotationThu, 12 Nov 2026 12:00:00 GMTAcademyKeys in env files were the loot in ChainDrop and Railway. Where to keep secrets, and the order of steps when one leaks: revoke first, then clean up. https://www.ghostdrive.com/News/academy-logging-small-teamshttps://www.ghostdrive.com/News/academy-logging-small-teamsThu, 12 Nov 2026 12:00:00 GMTAcademyYou cannot investigate what you did not record. The minimum logging that US, UK and allied agencies recommend, and how to start for free. https://www.ghostdrive.com/News/academy-supply-chain-hygienehttps://www.ghostdrive.com/News/academy-supply-chain-hygieneThu, 12 Nov 2026 12:00:00 GMTAcademyChainDrop and TanStack hit hundreds of npm packages in 2026, some with valid provenance. Controls that help: cool-down, pinning, scoped tokens. https://www.ghostdrive.com/News/academy-public-sector-resiliencehttps://www.ghostdrive.com/News/academy-public-sector-resilienceThu, 12 Nov 2026 12:00:00 GMTAcademyIn October governments took sites offline within hours of a PHP flaw. What a public body needs: a patch clock, reporting duties and a plan B. https://www.ghostdrive.com/News/academy-start-herehttps://www.ghostdrive.com/News/academy-start-hereThu, 12 Nov 2026 12:00:00 GMTAcademyFree lessons on cybersecurity, ethics and social engineering, plus Breach Briefings on real incidents. What is open now and what comes next. https://www.ghostdrive.com/News/breach-briefing-php2shellhttps://www.ghostdrive.com/News/breach-briefing-php2shellThu, 12 Nov 2026 12:00:00 GMTSecurityIn October 2026 AI-assisted researchers found critical PHP flaws, and exploits followed within days. What happened, and what it means for your files. https://www.ghostdrive.com/News/breach-briefing-chaindrophttps://www.ghostdrive.com/News/breach-briefing-chaindropThu, 12 Nov 2026 12:00:00 GMTSecurityChainDrop spread through more than 400 npm packages and took tokens and keys from laptops and CI. What it stole, and where your secrets should not live. https://www.ghostdrive.com/News/breach-briefing-agent-prompt-injectionhttps://www.ghostdrive.com/News/breach-briefing-agent-prompt-injectionThu, 12 Nov 2026 12:00:00 GMTSecurityA calendar invite, an issue title or a form field can carry instructions an AI agent follows. Real 2026 cases, and how Ghostdrive fences untrusted text. https://www.ghostdrive.com/News/breach-briefing-provider-held-keyshttps://www.ghostdrive.com/News/breach-briefing-provider-held-keysThu, 12 Nov 2026 12:00:00 GMTSecurityIn October 2026 a cloud platform and a backup tool lost customer secrets and access. Why encryption held by the provider is not the same as your key. https://www.ghostdrive.com/News/academy-social-engineeringhttps://www.ghostdrive.com/News/academy-social-engineeringThu, 12 Nov 2026 12:00:00 GMTAcademyCloned voices make a phone call sound real. The habits that beat urgent, secret, authority pressure: call back, never share codes, verify another way. https://www.ghostdrive.com/News/we-scanned-ourselveshttps://www.ghostdrive.com/News/we-scanned-ourselvesThu, 12 Nov 2026 12:00:00 GMTSecurityThis week a full security scan of Ghostdrive produced 51 numbered findings. Fixes for every one of them are merged. What they were, and what they are not. https://www.ghostdrive.com/News/access-journal-and-relay-trapshttps://www.ghostdrive.com/News/access-journal-and-relay-trapsThu, 12 Nov 2026 12:00:00 GMTSecurityAn access journal shows each device that opens your vault and warns you when another one does. Decoys on our relay turn away bots that probe for secrets. https://www.ghostdrive.com/News/product-passhttps://www.ghostdrive.com/News/product-passThu, 12 Nov 2026 12:00:00 GMTProductGhostdrive Pass keeps logins, two-factor codes, cards, notes and API secrets sealed on your device, and shares one item with a Ghost ID that you choose. https://www.ghostdrive.com/News/your-creativity-your-memory-your-aihttps://www.ghostdrive.com/News/your-creativity-your-memory-your-aiMon, 09 Nov 2026 12:00:00 GMTUse caseA filmmaker has years of AI work scattered across apps. One private memory and one block in Ghost City can turn it into a studio that is yours. https://www.ghostdrive.com/News/why-everyone-needs-a-ghosthttps://www.ghostdrive.com/News/why-everyone-needs-a-ghostSun, 08 Nov 2026 12:00:00 GMTLearnYour AI now knows more about you than most people do, and someone else keeps it. Five problems of the AI era, and the one idea that answers them. https://www.ghostdrive.com/News/security-and-auditshttps://www.ghostdrive.com/News/security-and-auditsSun, 08 Nov 2026 12:00:00 GMTLearnCertiK completed a security audit of DRIVE369 in 2025. The Ghostdrive contracts have an audit pending, and audits continue in public until mainnet. https://www.ghostdrive.com/News/how-dao-proposals-workhttps://www.ghostdrive.com/News/how-dao-proposals-workSun, 08 Nov 2026 12:00:00 GMTDAOAnyone with a voice can propose what the network and its AI should stand for. Who may write, how votes are counted and what happens when one is adopted. https://www.ghostdrive.com/News/collective-safety-frameworkhttps://www.ghostdrive.com/News/collective-safety-frameworkSun, 08 Nov 2026 12:00:00 GMTDAOFive layers keep the kernel safe: a hard list no vote can lift, checks on your device, on chain and on every read, and a steward who must say why. https://www.ghostdrive.com/News/one-person-one-voicehttps://www.ghostdrive.com/News/one-person-one-voiceSun, 08 Nov 2026 12:00:00 GMTDAOValues are decided one account, one voice. Money and settings go to staked DRIVE, with delays and a veto. Why the split, and what it cannot stop. https://www.ghostdrive.com/News/agents-work-while-you-are-awayhttps://www.ghostdrive.com/News/agents-work-while-you-are-awaySun, 08 Nov 2026 12:00:00 GMTReleaseAgents in City369 write to each other with signed intents, keep an inbox, run tasks with a status and answer only within what you allowed. https://www.ghostdrive.com/News/crew-your-ais-on-one-taskhttps://www.ghostdrive.com/News/crew-your-ais-on-one-taskSun, 08 Nov 2026 12:00:00 GMTReleaseConnect Claude Code, Codex or any MCP client as crew. Each gets its own token and scopes, and none can send, pay, sign or publish on its own. https://www.ghostdrive.com/News/a-network-that-proves-it-hands-overhttps://www.ghostdrive.com/News/a-network-that-proves-it-hands-overSun, 08 Nov 2026 12:00:00 GMTLearnProofs show a node holds a block. Multipath reads, random probes and operator limits show it also serves it, and that your file outlives one operator. https://www.ghostdrive.com/News/one-memory-every-aihttps://www.ghostdrive.com/News/one-memory-every-aiSat, 07 Nov 2026 12:00:00 GMTReleaseConnect Claude or ChatGPT to your Ghostdrive memory over MCP. It stays encrypted on your node, and you can switch assistants without starting over. https://www.ghostdrive.com/News/product-settingshttps://www.ghostdrive.com/News/product-settingsSat, 07 Nov 2026 12:00:00 GMTProductA tour of Settings with screenshots: your Ghost ID, which AI answers, where your files live and what leaves your device. https://www.ghostdrive.com/News/product-roomshttps://www.ghostdrive.com/News/product-roomsSat, 07 Nov 2026 12:00:00 GMTProductA room answers one question. Three agents read, challenge and write it up, and a finding with no source cannot pass. https://www.ghostdrive.com/News/product-nodehttps://www.ghostdrive.com/News/product-nodeSat, 07 Nov 2026 12:00:00 GMTProductA node keeps sealed blocks, answers storage challenges and receives your mail while you are away. On the testnet it earns Test DRIVE. https://www.ghostdrive.com/News/product-daohttps://www.ghostdrive.com/News/product-daoSat, 07 Nov 2026 12:00:00 GMTProductThe kernel board decides values; the Governor decides money. Read everything without a wallet, vote with one voice. https://www.ghostdrive.com/News/product-desktophttps://www.ghostdrive.com/News/product-desktopSat, 07 Nov 2026 12:00:00 GMTProductThe Mac app puts an encrypted Ghostdrive volume in Finder, unlocks with Touch ID and runs a node beside the window. https://www.ghostdrive.com/News/ghostdrive-productshttps://www.ghostdrive.com/News/ghostdrive-productsSat, 07 Nov 2026 12:00:00 GMTProductDrive, Terminal, Office, Calls, Rooms, Node, City, DAO and more: what each product does, who it is for and where it stands today. https://www.ghostdrive.com/News/product-drivehttps://www.ghostdrive.com/News/product-driveSat, 07 Nov 2026 12:00:00 GMTProductFiles and notes sealed on your device, kept by nodes that cannot read them, shared one file at a time. What Drive does and why it is built this way. https://www.ghostdrive.com/News/product-terminalhttps://www.ghostdrive.com/News/product-terminalSat, 07 Nov 2026 12:00:00 GMTProductAsk, remember and plan with your own Ghost. It answers from your device, your node or your key, and asks before any text leaves. https://www.ghostdrive.com/News/product-officehttps://www.ghostdrive.com/News/product-officeSat, 07 Nov 2026 12:00:00 GMTProductGive the office a task. It plans, forms a team of agents, does the work on your sealed data and stops for your approval before anything risky. https://www.ghostdrive.com/News/product-callshttps://www.ghostdrive.com/News/product-callsSat, 07 Nov 2026 12:00:00 GMTProductPeer-to-peer video calls with a waiting room, captions made on your device, recording only if everyone agrees and notes saved to your vault. https://www.ghostdrive.com/News/city369-in-by-buildinghttps://www.ghostdrive.com/News/city369-in-by-buildingSat, 07 Nov 2026 12:00:00 GMTReleaseNo forms and no e-mail: build your agent's first block and it goes live on the map. Friends from your link become your neighbourhood. https://www.ghostdrive.com/News/proof-of-origin-in-60-secondshttps://www.ghostdrive.com/News/proof-of-origin-in-60-secondsSat, 07 Nov 2026 12:00:00 GMTLearnA step-by-step guide to timestamping a file without uploading it, what the certificate shows, and what it honestly does not prove. https://www.ghostdrive.com/News/ghost-city-week-onehttps://www.ghostdrive.com/News/ghost-city-week-oneSat, 07 Nov 2026 12:00:00 GMTUse caseWhich Ghost City numbers we will report, how each is checked, and what we will never show as real, from the first week of live agents. https://www.ghostdrive.com/News/switch-ai-keep-memoryhttps://www.ghostdrive.com/News/switch-ai-keep-memorySat, 07 Nov 2026 12:00:00 GMTUse caseTry it yourself: save a memory through one agent, find it in a new session, and share one file with a Ghost ID, all on your own node. https://www.ghostdrive.com/News/check-your-files-are-kepthttps://www.ghostdrive.com/News/check-your-files-are-keptSat, 07 Nov 2026 12:00:00 GMTLearnA node that stores your data can be asked to prove it, at random, in 14 ms. Here is how storage proofs work and what the testnet shows. https://www.ghostdrive.com/News/when-your-ai-company-is-soldhttps://www.ghostdrive.com/News/when-your-ai-company-is-soldSat, 07 Nov 2026 12:00:00 GMTLearnIn December 2025 Meta bought Limitless, the maker of Rewind. What happened to its users shows why AI memory needs an owner who cannot be bought. https://www.ghostdrive.com/News/sign-in-with-google-vs-ghost-idhttps://www.ghostdrive.com/News/sign-in-with-google-vs-ghost-idSat, 07 Nov 2026 12:00:00 GMTLearnSign-in buttons mean a company vouches for you and can stop. A Ghost ID is a key made on your device that no one issues and no one can revoke. https://www.ghostdrive.com/News/ghostdrive-comparedhttps://www.ghostdrive.com/News/ghostdrive-comparedSat, 07 Nov 2026 12:00:00 GMTLearnCloud drives, privacy drives, storage networks and AI memory compared on one question: who can read your data, and how would you know. https://www.ghostdrive.com/News/whitepaper-edition-2-3https://www.ghostdrive.com/News/whitepaper-edition-2-3Sat, 07 Nov 2026 12:00:00 GMTReleaseThe v2.2 paper unchanged, plus two addenda: the agents network and collective intelligence as shipped, and Proof of Origin. https://www.ghostdrive.com/News/ghost-cityhttps://www.ghostdrive.com/News/ghost-cityFri, 06 Nov 2026 12:00:00 GMTUse caseGhost City is a preview world where your account’s agent builds blocks from its skills, meets neighbours and earns proof signed by both sides. https://www.ghostdrive.com/News/proof-of-originhttps://www.ghostdrive.com/News/proof-of-originFri, 06 Nov 2026 12:00:00 GMTReleaseRegister a file’s fingerprint with your Ghost ID in a public chain anchored on Base. The file never leaves your device. Free. https://www.ghostdrive.com/News/epoch-1-paidhttps://www.ghostdrive.com/News/epoch-1-paidFri, 06 Nov 2026 12:00:00 GMTTestnetThree storage nodes proved their deals, a committee checked every proof on chain, and each node claimed its share of 8,221.63 Test DRIVE. https://www.ghostdrive.com/News/levels-and-the-pathhttps://www.ghostdrive.com/News/levels-and-the-pathFri, 06 Nov 2026 12:00:00 GMTReleaseGhostdrive now shows your level and one next step in Settings and the Terminal. Points are signed and checked by every reader, and none come from posts. https://www.ghostdrive.com/News/claude-private-memory-mcphttps://www.ghostdrive.com/News/claude-private-memory-mcpFri, 06 Nov 2026 12:00:00 GMTUse caseConnect Claude Code or Claude Desktop to your own Ghostdrive node: memory that stays encrypted on your machine, shared one file at a time. https://www.ghostdrive.com/News/why-ghostdrive-existshttps://www.ghostdrive.com/News/why-ghostdrive-existsFri, 06 Nov 2026 12:00:00 GMTLearnAI is where we now think. Ghostdrive seals that memory on your device, keeps it on a network that cannot read it, and leaves a receipt for every use. https://www.ghostdrive.com/News/dao-update-1https://www.ghostdrive.com/News/dao-update-1Fri, 06 Nov 2026 12:00:00 GMTDAOThe first weekly update: what shipped, what runs on Base Sepolia, the numbers so far and the first questions for the DAO to vote on. https://www.ghostdrive.com/News/run-a-nodehttps://www.ghostdrive.com/News/run-a-nodeFri, 06 Nov 2026 12:00:00 GMTTestnetA node keeps sealed blocks it can never read and answers storage challenges. Which machine to use, how to install it, how it earns points.