Beyond PHP, three Node.js version branches are also affected by high-severity vulnerabilities, and users need to update their runtime environments promptly. - Lookonchain

A series of security vulnerabilities have been disclosed in internet infrastructure software within a single day, affecting PHP, Node.js, and Go.

Multiple internet infrastructure software projects rolled out security updates in a single day, addressing vulnerabilities including remote code execution, TLS certificate validation bypass, and certificate trust risks. PHP fixed two critical flaws: CVE-2026-109618 and CVE-2026-109619, both enabling unauthenticated remote code execution that impacts PHP environments processing web requests. The patched versions are 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Node.js’ advisory details 10 vulnerabilities, four of which are high-severity: these include remote code execution via out-of-bounds write in the Brotli decoder, DNS name truncation, and two TLS certificate hostname validation bypass issues. Fixed versions are 26.12.1, 24.22.1, and 22.23.4. Additionally, Go’s crypto/x509-related risk is tracked as CVE-2026-111943, rated "Important" by Red Hat with a CVSS 3.1 score of 6.8. Attackers with specific network access and valid certificates could impersonate legitimate servers to intercept or alter communications. Go 1.26.10 and 1.27.3 have been added to a deny list, blocking trust for compromised intermediate certificates.

12 minutes ago

Dataline completes $10.6 million seed round funding, and plans to conduct an ICO.

Decentralized data network for AI agents Dataline has closed a $10.6 million seed round, co-led by Lattice and Samsung-backed Dispersion Capital, with participation from Symbolic Capital, Coinbase Ventures, Anagram, and Robinhood co-founder & CEO Vlad Tenev, among others. The round, completed in April, utilized a SAFE agreement with token warrants; valuation was not disclosed. Dataline is now live, covering approximately 50 data sources to deliver on-chain and off-chain data, and scores data reliability, timeliness, and consistency using AI. Proceeds will be allocated to expanding data sources, enhancing data validation, and expanding into robotics, AI training data, and other sectors. Dataline plans to launch a token by the end of 2026 for network payments and data access, and intends to conduct a public token sale on Base via Uniswap’s Continuous Clearing Auction (CCA) system, with details set to be revealed next week. The public sale’s target fundraising amount, token quantity, and other terms remain undisclosed.

12 minutes ago

Trump plans to leverage White House cyber crime efforts to showcase achievements in combating cross-border crypto fraud.

White House officials said on October 21 that Trump planned to focus on the U.S. government’s actions to crack down on overseas crypto fraud rings during the White House’s cybersecurity event that day, including recovering funds and shutting down fraudulent operations. These transnational criminal groups steal funds from U.S. citizens via romance scams, phishing, ransomware and other methods. The U.S. government noted that law enforcement agencies have seized approximately $833 million in crypto assets linked to overseas fraud, and shut down 503 fraudulent crypto websites under the supervision of the Homeland Security Task Force. Relevant authorities have also notified nearly 9,000 U.S. citizens to alert them they are being targeted by fraud. The U.S. Treasury Department previously announced the establishment of an inter-agency "Fraud Strike Task Force" to target "pig butchering" scams run by organized criminal groups in Myanmar, Cambodia, Laos and the Philippines. Since last year, the U.S. has also imposed multiple sanctions aimed at cutting off support for related fraud websites and their infrastructure.

12 minutes ago

American Bankers Association voices dissatisfaction with OCC’s final GENIUS Act rule, which abandons proposed restrictions on stablecoin yields.

Crypto journalist Eleanor Terrett reported that the American Bankers Association (ABA) has voiced dissatisfaction with the final rules implemented by the U.S. Office of the Comptroller of the Currency (OCC) under the GENIUS Act. The OCC abandoned the previously proposed restrictions on stablecoin yields, a move the ABA argues will "maintain the status quo for crypto platforms." The ABA’s CEO stated: "It is a mistake to wait until deposit outflows and economic harm have already occurred before attempting to address these issues."

12 minutes ago

Bonk Guy: This round is the "privacy cycle", privacy protocol MASK is undervalued.

Renowned trader Bonk Guy posted that the current crypto market is showing characteristics of a "privacy cycle". He noted that since yesterday, Bitcoin has risen approximately 3%, ZEC is up 16%, adding over $3 billion in market capitalization. MASK currently has a market cap of roughly $26 million, with its protocol trading volume and fees hitting consecutive all-time highs, he added. Citing data from DefiLlama, he stated that MASK ranks first among privacy protocols by revenue, outearning the next 10 privacy protocols combined. By comparison, ZEC’s market cap gain over the past 24 hours is roughly 115 times MASK’s entire market cap. Bonk Guy also said that MASK’s upcoming deployment on Solana is set to launch in the coming days, which he expects will further drive growth in usage, trading volume, and fees. He went on to call MASK the most undervalued privacy protocol in the crypto market.

12 minutes ago

Putin in principle has agreed to resume the trilateral peace talks between Russia, the United States and Ukraine, with Abu Dhabi a possible venue.

According to reports from Reuters and Axios, the Kremlin stated that Russian President Vladimir Putin told U.S. envoy Steve Witkoff on Wednesday he "agrees in principle" to resume trilateral peace talks between Russia, Ukraine and the U.S. around November 10 to end the Russia-Ukraine conflict, with the venue potentially in Abu Dhabi. Witkoff held a three-hour meeting with Putin in St. Petersburg the same day, presenting the latest plan to end the Russia-Ukraine conflict. Trump envoy Jared Kushner joined the session via video. Witkoff informed Putin that progress had been made in the Oslo talks, and expressed hope that both sides would consider restarting the Russia-U.S.-Ukraine trilateral negotiations and allow technical experts to participate in discussions on specific issues. He also submitted multiple documents on the peaceful resolution of the Russia-Ukraine conflict to Putin. Separately, Putin raised with Witkoff the possibility of Russia acting as a mediator between the U.S. and Iran. Putin noted that Russia has decades of special trust relations with Iran and is willing to contribute to resolving the current crisis.

12 minutes ago