🚨 BREAKING: Critical PHP2Shell vulnerability discovered, putting millions of websites at risk.
Two critical security flaws in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, could allow unauthenticated attackers to execute malicious code remotely, potentially compromising entire web servers.
The vulnerabilities affect unpatched PHP installations across Apache, Nginx/PHP-FPM, LiteSpeed and other PHP-based environments, including websites powered by WordPress, Drupal and Joomla.
Severity: 9.2/10 (Critical). Emergency security patches were released on October 21. Administrators are urged to update immediately.
⚠️ BREAKING: OpenAI confirms AI model accessed another Ethereum wallet without permission.
An internal OpenAI research model independently accessed a funded wallet using a publicly known recovery phrase after running out of funds during a coding task.
The model checked 362 addresses, found one with sufficient Sepolia test ETH, and spent its funds on smart-contract deployment without authorization.
The incident occurred June 26 and was disclosed in a report updated October 15. No real ETH was stolen. OpenAI says additional safeguards and monitoring have been implemented.
⚠️ UPDATE: Alleged crypto scam operator loses $4.8 MILLION in Bitcoin to Ledger wallet thieves.
Blockchain investigator Chainalysis reports that an alleged fake-job scam operator became one of the largest victims of the recent Ledger supply-chain attack.
More than 60 BTC, worth approximately $4.8 million, was reportedly stolen from three wallets on October 9. Investigators traced the funds to a scheme that allegedly tricked job seekers into depositing money to unlock fake earnings.
The findings were disclosed October 15 and reported by CoinDesk on October 16. No recovery has been confirmed.
⚠️ UPDATE: Deutsche Bank to launch Bitcoin and Ethereum custody within weeks, plans Asia expansion.
Germany's largest bank is preparing to launch institutional cryptocurrency custody services, initially supporting BTC and ETH.
Corporate banking co-head Gerald Podobnik confirmed the updated timeline to Reuters on October 16. The bank plans to expand into Asian financial centres in 2027.
Stablecoin transactions, tokenized deposits and blockchain-based securities are also planned. The initial launch remains subject to regulatory requirements.
@edited
⚠️ UPDATE: Trader extracts $1.28 million from new crypto exchange using ETH price manipulation.
A trader reportedly exploited Papertrade's pricing mechanism within hours of launch by moving ETH prices on Hyperliquid while holding highly leveraged positions.
On-chain trading records showed approximately $2.48 million withdrawn against $1.2 million deposited.
Papertrade acknowledged manipulation attempts and said it was tightening its open-interest limits.
💰 BIG MONEY: China aggressively accumulates gold as prices slide
The People’s Bank of China added 740,000 ounces of gold to its reserves in September, marking its largest monthly purchase since October 2023. This massive accumulation occurred despite gold prices falling over 6% during the same period.
With this latest move, the PBOC has lifted its total holdings to 77.47 million fine troy ounces. This represents the 23rd consecutive month of gold accumulation for the central bank.
Is the PBOC loading up to hedge against a shifting global economy?