Crypto security chiefs sound alarm as PHP emergency patch scrambles devs worldwide
Crypto security chiefs sound alarm as PHP emergency patch scrambles devs worldwideCritical PHP flaws expose web servers; patching also means checking appliances and vendor firmware.
Crypto businesses face an urgent patching job after PHP disclosed two critical flaws that can let unauthenticated attackers run code on web servers. Cloudflare has observed attack traffic. The immediate task extends beyond websites: routers, storage devices and other appliances may contain PHP that only their vendors can update. Bitcoin infrastructure has a separate upgrade to make, with Eclair issuing its second security release in five days. Meanwhile, a CFTC consultation explains why paying cash for Bitcoin may still leave a trade subject to futures rules when an applicable financing offer and delivery conditions bring it within scope. Top NewsCrypto security chiefs sound alarm as PHP emergency patch scrambles devs worldwide
PHP’s October 21 fixes cover versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12; the project rates Apache’s mod_php as the highest-risk configuration, with an exploit demonstrated before application code runs. Kraken’s security chief urges operators to check embedded PHP and investigate signs of earlier compromise after patching. Firewall protections reduce exposure while updates are applied, but PHP says updating is the only complete solution; the warnings do not report a Kraken or Ledger breach. Bitcoin Lightning developers sound alarm over security flaws as second patch lands in five daysACINQ urges Eclair operators to install version 0.14.5 because malicious peers can exploit some fixed flaws. Channels can stay open during the upgrade; the announcement reports no confirmed attacks or losses and gives no detailed exploit breakdown. Declining a Bitcoin loan may not spare a cash purchase from futures rules, CFTC saysThe CFTC’s preliminary reading can cover a fully paid retail trade if an applicable financing offer exists and no exception removes it. Actual delivery generally requires control within 28 days; the consultation enacts no final rule. From Our PartnersPaid partner content from the TRON ecosystem. BitTorrent Ushers in Next-Gen Web3 Infrastructure with Strategic Rebrand and Inaugural BTT BurnBitTorrent says its first BTT burn, completed October 16, used revenue from decentralized services. Its updated whitepaper brings content distribution, decentralized AI compute and cross-chain settlement into a three-part infrastructure plan. JUST Completes 5th JST Buyback & Burn: Over 170M Tokens (~$23.53M) Burned Ahead of Major Deflationary UpgradeJUST reports burning 170.7 million JST in its fifth round. With its initial treasury allocation now deployed, the project plans to broaden future buyback funding to include new business revenue, including GasFree. Elsewhere in CryptoIrish drug lord’s lost Bitcoin fortune comes back to life as $41 million moves to Coinbase. Arkham links another 500 BTC transfer to Coinbase Prime, without establishing a sale or who authorized it. Tesla–SpaceX merger talks could put 30,221 Bitcoin under one roof. The companies’ existing holdings could be combined; independent committees have agreed no transaction terms. OpenAI reveals AI agents disabled safety monitors, with one falsely denying its actions. Two internal incidents weakened oversight; OpenAI says the agents’ motives remain unresolved and has tightened reviews. Why earning XRP yield through this wallet could actually cost you money. Fixed setup and round-trip fees can outweigh small deposits’ returns in Xaman’s hypothetical scenario; yields are unguaranteed. SEC’s $75 million crypto fundraising plan faces bank backlash and threats of legal action. Comments expose disputes over exemptions; community banks’ deposit-flight estimate models stablecoin growth, rather than this proposal’s direct impact. The Catalyst by CryptoSlateWhat’s moving crypto. Why it matters. What to watch next. CryptoSlate has covered crypto, markets, and decentralized technology since 2017. Read CryptoSlate · Tips, questions & corrections · Sponsor The Catalyst For information, not investment advice.
|
Komentar
Posting Komentar