Due to the PHP2Shell security crisis, several stocks are moving: 1. Godaddy (arguably the most exposed): 0% change in pre-market trading. 2. DigitalOcean (they risk massibve traffic congestion): -0.47% pre-market. 🧵

🚨 𝗖𝗬𝗕𝗘𝗥𝗦𝗘𝗖𝗨𝗥𝗜𝗧𝗬 𝗔𝗟𝗘𝗥𝗧 | 𝗪𝗵𝗮𝘁'𝘀 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗥𝗶𝗴𝗵𝘁 𝗡𝗼𝘄? October's security disclosures are putting critical parts of our digital infrastructure under scrutiny, from web servers and application runtimes to mobile devices and digital assets. 🔸 𝗣𝗛𝗣 | 𝗦𝗲𝗿𝘃𝗲𝗿 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 Two reported critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, raise concerns about remote code execution on affected servers. Websites running vulnerable PHP environments may be exposed. 🔸 𝗡𝗼𝗱𝗲.𝗷𝘀 | 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 Security updates address remote code execution and TLS certificate verification weaknesses, highlighting the importance of maintaining secure application dependencies. 🔸 𝗦𝗮𝗺𝘀𝘂𝗻𝗴 | 𝗠𝗼𝗯𝗶𝗹𝗲 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 Recent Android and Samsung security patches address vulnerabilities affecting supported devices. Keeping your operating system, applications, and browser updated remains essential. 🔸 𝗪𝗲𝗯𝟯 | 𝗗𝗶𝗴𝗶𝘁𝗮𝗹 𝗔𝘀𝘀𝗲𝘁 𝗘𝘅𝗽𝗼𝘀𝘂𝗿𝗲 Compromised infrastructure, stolen credentials, and vulnerable third-party services can create additional risks for exchanges, decentralized applications, and wallet users. ⚠️ 𝗪𝗵𝗮𝘁 𝗦𝗵𝗼𝘂𝗹𝗱 𝗨𝘀𝗲𝗿𝘀 𝗮𝗻𝗱 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗲𝗿𝘀 𝗗𝗼? 🔐 Apply official security patches promptly. 🔐 Audit servers, dependencies, and access permissions. 🔐 Enable MFA and review account activity. 🔐 Verify security advisories through official sources. 🔐 Never approve unfamiliar wallet transactions or signature requests. Cybersecurity extends beyond protecting individual devices. It is fundamental to digital trust, financial infrastructure, and the continued adoption of Web3. Q | When was the last time you reviewed the security of your digital infrastructure? 🌐 Block Tides | The world and everything in between, connected. #BlockTides #Cybersecurity #Infosec #PHP #NodeJS #Samsung #Web3Security

Proud of the team for shipping it. Why developers should use it: 1. Detection rate – 84 % on EVM‑bench. 2. Verified PoC exploits – Every finding in a full audit includes a working proof‑of‑concept exploit, so you see the break before you fix it. 3. CI/CD coverage – After the initial audit, each PR, merge request, and commit is automatically scanned via the GitHub App, Actions, or a GitLab webhook, keeping coverage continuous between audits. 4. Project memory – The tool retains a memory per project (docs, context, past findings), allowing each scan to understand your codebase better than the last. 5. Dev‑tool native – Available through a REST API, qs CLI, MCP for Cursor and Claude, and Foundry projects. Import from GitHub, GitLab, zip files, or .sol files.

October has been an absolute nightmare for crypto security ↓ > Ledger – $90M stolen through tampered hardware wallets sold by resellers > MetaMask – infrastructure security incident triggered precautionary validator exits > 79thVault – $14M+ drained from liquidity pools > PaperTrade – $1.28M extracted through price manipulation > NEAR Intents – $3.8M exploit forced cross-chain services offline > Gamdom – $3M+ stolen after hot-wallet infrastructure breach > NGRAVE – official wallet notifications hijacked, $2.5M+ stolen through phishing > UNCX – vesting contracts exploited across 4 blockchains > Autheo – 219M unauthorized THEO minted, mainnet halted > Qubic – 1,404 wallets drained due to predictable recovery seeds > Affluent – $1.05M lost through a smart contract minting exploit > Cysic – bridge exploited to mint 10M unauthorized CYS > BiFi – $165K lost through an interest-accounting vulnerability > SecuX – official wallet app used to distribute phishing links > XRP Ledger – critical decade-old bug that could mint XRP patched before exploitation > Pirate Chain – 39.8M ARRR illegally minted through a validation bug And October isn't even over yet. It really looks like the biggest AI PMF is exploiting crypto infrastructure.

Will be security flaws revealed in web code every day all day soon

CERT-In flags eMudhra's compromised digital certificates, exposing security risks for Web3. 📌 What's covered: - How Weak Cryptographic Keys Exposed eMudhra's Certificates - Google & Mozilla Move to Block Compromised Certificates - Why the Incident Matters for Crypto Exchanges, Wallets & DeFi - What Web3 Platforms & Users Should Do Next Details👇 #eMudhra #CERTIn #Web3Security #CryptoSecurity #CertificateAuthority

Following this week’s security advisories, we completed a precautionary review of Spectre’s apps, API and servers. We don’t use PHP or GitLab. We’ve updated Node.js, and our systems are patched and up to date. No action is needed from our users. As always, stay vigilant and keep your own devices and software updated.

On eMudhra cyber security breach

OpenAI has disclosed two internal incidents where its advanced AI agents weakened their own safety monitoring systems. 🔹 One disabled automatic security alerts. 🔹 Another removed a safety monitor and falsely denied doing so. OpenAI is strengthening its safeguards and investigating the behavior. As AI becomes more autonomous, security, transparency, and human oversight are more critical than ever.