hp

The New York State Department of Financial Services in the United States has issued an alert regarding two critical PHP vulnerabilities, urging regulated entities to quickly identify and remediate known exploited vulnerabilities.

According to Bloomberg, Amazon's threat intelligence team discovered that hackers attempted to exploit related vulnerabilities days before the public disclosure of two security vulnerabilities in PHP. After the vulnerabilities were disclosed on Wednesday, hacker activities further expanded. Amazon stated that the related vulnerabilities are being widely exploited but did not disclose specific victim information.Cybersecurity company Palo Alto Networks found that there are over 22.6 million exposed instances worldwide with related vulnerabilities. Wiz researchers estimate that the vulnerabilities could affect about 70% of the internet and have existed for over a decade, while Matt Hull, Vice President of Cyber Intelligence and Response at NCC Group, warned that some vulnerable systems may have already been compromised or even implanted with backdoors.

The Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology of China has detected two critical remote code execution vulnerabilities in PHP, posing serious risks. PHP is an open-source server-side scripting language widely used for web development. Unauthenticated attackers can exploit these vulnerabilities to execute arbitrary code remotely, leading to server control, sensitive information leakage, business interruption, and other harms.The affected versions include the 8.5 series below 8.5.12, the 8.4 series below 8.4.27, the 8.3 series below 8.3.36, the 8.2 series below 8.2.35, and the 8.1 series and earlier versions. The PHP security team has fixed the vulnerabilities and released a security announcement.NVDB recommends that relevant units and users conduct immediate inspections, upgrade to the latest secure version in a timely manner, or take temporary protective measures such as taking the system offline, disabling session upload progress features, network isolation, and restricting network access, as well as strengthening monitoring and management, and promptly modifying credentials such as accounts, passwords, and keys.

BTCPay Server has updated the optional WooCommerce/WordPress deployment through its Docker installer to address the recently disclosed serious PHP vulnerability. Users running WooCommerce on BTCPay Server should update immediately, which can be done by clicking "Update" directly within BTCPay Server.

Tencent Cloud Security Center has detected that PHP has been disclosed to have remote code execution vulnerabilities, with vulnerability IDs CVE-2026-109618 and CVE-2026-109619, codenamed "php2shell". This can allow unauthenticated remote attackers to trigger memory corruption and ultimately achieve remote code execution by sending specially crafted multipart POST requests, thereby completely controlling the server and causing other harms.Tencent Cloud Security recommends conducting timely security self-checks. If you are within the affected range, please update and patch promptly to avoid being invaded by external attackers.

Bitget Launchpool project Axis Robotics (AXIS) is now open for investment, with a total prize pool of 1,333,333 AXIS. The locking channel will close on October 28 at 21:00 (UTC+8). This round of Launchpool has opened 2 locking pools, including:BGB Locking Pool:Total airdrop amount: 1,133,333 AXISVIP user locking limit: 100,000 BGBRegular user locking limit: 10,000 BGBAXIS Locking Pool:Total airdrop amount: 200,000 AXISIndividual locking limit: 3,333,333 AXIS

Bitget Launchpool is about to launch Axis Robotics (AXIS), with a total prize pool of 1,333,333 AXIS. The lock-up channel will be open from October 21 at 21:00 to October 28 at 21:00 (UTC+8). This round of Launchpool will open 2 lock-up pools.The total airdrop amount for the BGB lock-up pool is 1,133,333 AXIS, with a lock-up limit of 50,000 BGB for VIP users and a lock-up limit of 5,000 BGB for regular users. The total airdrop amount for the AXIS lock-up pool is 200,000 AXIS, with a personal lock-up limit of 3,333,333 AXIS.

According to GMGN data, the top 5 tokens with net inflow of smart money in the past 24 hours are as follows:PHP-UP (E1FT....smh): Net inflow of $1,000, with a 24-hour increase of 512.7%, currently priced at $0.0001.Pokémon (D42T....vb1): Net inflow of $1,000, with a 24-hour decrease of -38%, currently priced at $0.0007.XHOLDINGS (5SPg....ump): Net inflow of $699, with a 24-hour decrease of -18.8%, currently priced at $0.0001.Naseem (9PSZ....ump): Net inflow of $570, with a 24-hour increase of 37.1%, currently priced at $0.0001.XMR (WXMR....eJp): Net inflow of $544, with a 24-hour decrease of -3.2%, currently priced at $582.4483.

Slow Fog Security Warning states that PHP released a security announcement on October 20, disclosing two serious security vulnerabilities that could lead to remote code execution (RCE), numbered CVE-2026-109618 and CVE-2026-109619, both with a CVSS v4 score of 9.2. Currently, the PHP official has not released a fix patch, and the specific affected versions and exploitation conditions are yet to be confirmed.According to existing information, the PHP official plans to release a security update on October 21 at 14:00 UTC (22:00 Beijing time). Slow Fog recommends that relevant institutions promptly check the PHP versions in their servers and business systems, focusing on PHP services exposed to the public network, and upgrade in a timely manner after the patch is released; systems that cannot be upgraded temporarily should restrict access sources and take isolation measures if necessary.

According to the Gate Launchpool page, there are currently four projects underway: DNA, BLKHION, CT, and GT, offering various asset staking options.Among them, DNA is the first project, with a total reward of 2,800,000 DNA. The APR for the ETH, BTC, and DNA pools is 7.25%, 6.24%, and 218.90%, respectively. The total reward for the BLKHION project is 30,400 BLKHION, with the APR for the USDT, BLKGRWON, and MAG7XON pools being 5.15%, 147.62%, and 97.56%, respectively.Meanwhile, the total reward for the CT project is 1,000,000 CT, with the APR for the USDT, CT, and GT pools being 5.10%, 65.82%, and 2.48%, respectively. The total reward for the GT project is 18,400 GT, with the APR for the ETH and BTC pools being 6.83% and 4.51%, respectively.

The multi-agent framework Swarms announced that its Launchpad has integrated the dynamic bonding curve (DBC) of the decentralized liquidity protocol Meteora for issuing tokenized agents and prompts, claiming that the issuance speed has increased by approximately 80%.Creators can now pair tokens with specified Solana tokens and earn creator fees from the paired tokens in the liquidity pool. The new issuance process also includes on-chain fee configuration, enhanced token security measures, and a simplified release process. Swarms refers to this update as Agent Capital Markets 2.0.

According to the Gate Launchpool page, there are currently five projects underway: BLKHION, CT, GT, XAUT, and LAPTOP, offering various asset staking options.Among them, the total reward for the BLKHION project is 30,400 BLKHION, with three pools: USDT, BLKGRWON, and MAG7XON, with APRs of 6.67%, 187.64%, and 134.90% respectively; the total reward for the CT project is 1,000,000 CT, with APRs for the USDT, CT, and GT pools of 6.57%, 86.43%, and 2.91% respectively.Meanwhile, the total reward for the GT project is 18,400 GT, with APRs for the ETH and BTC pools of 4.47% and 2.85% respectively; the total reward for the XAUT project is 34 XAUT, with APRs for the USDT, XAUT, and GT pools of 6.62%, 9.99%, and 6.94% respectively; the total reward for the LAPTOP project is 1,289,608 LAPTOP, with APRs for the LAPTOP and BTC pools of 313.06% and 2.27% respectively.

On October 9, B.AI announced that the total number of registered users has surpassed 2,900,011. With the continuous expansion of the global cutting-edge model matrix, users can schedule top models through a unified entry point; the settlement and account system further lowers the usage threshold; and the daily trillion-level Token throughput continues to support large-scale production-level AI workloads.From individual developers to enterprise-level teams, B.AI is becoming the productivity foundation for implementing AI applications. Users can log in to b.ai for more details.

Layer 1 blockchain Sui announced that its programmable off-chain channels processed over 40 million transactions per second during a real-time stress test aimed at high-frequency activities for AI agents, breaking the record set in July of this year. The test was conducted on Wednesday at the Sui Basecamp in Singapore, peaking at 40,614,180 TPS, surpassing the approximately 6.1 million TPS level of similar tests in July.During the test, transactions were processed through Sui's off-chain channels, which settle to the Sui mainnet when closed. Sui stated that over 10,000 channels were opened on the mainnet during the test, covering scenarios such as payments, gaming, and chat applications. These channels are designed to handle high-frequency activities, including interactions between AI agents, without requiring each transaction to be processed directly on-chain.Adeniyi Abiodun, co-founder and Chief Product Officer of Sui's original contributor Mysten Labs, stated that Sui is built for the moment when millions of AI agents transact daily, noting that no market in the world needs 6 million transactions per second, let alone 40 million; humans cannot move that fast, but agents can. Security company CertiK served as an independent auditor during the demonstration, reviewing the test data, with a report expected to be released in the coming days.

According to the official page of Gate Launchpool, the GT project is currently ongoing, with a total reward of 18,400 GT. Among them, the ETH pool rewards 9,200 GT, with a current APR of 4.28%, and the total amount of liquid staking is approximately 19,710.94 ETH; the BTC pool also provides a reward of 9,200 GT, with a current APR of 3.00%, and the total amount of liquid staking is approximately 968.33 BTC.In addition, the CT Launchpool has a total reward of 1,000,000 CT, setting up three staking pools: USDT, CT, and GT, with current APRs of 5.98%, 92.79%, and 3.38%, respectively; the XAUT Launchpool sets up three staking pools: USDT, XAUT, and GT, with current APRs of 6.32%, 11.18%, and 6.56%, respectively; the LAPTOP Launchpool sets up two staking pools: LAPTOP and BTC, with current APRs of 284.46% and 2.01%, respectively.

ChainCatcher crypto trader Bonk Guy posted on the X platform in response to the recent controversy surrounding his purchase of EMBER and explained his investment logic. Bonk Guy stated that he first noticed the project when EMBER's market cap was about 3 million dollars but did not buy in. After observing for a day due to the rapid growth of platform data, he re-evaluated and bought in from a market cap of about 7 million dollars all the way up to a 20 million dollar market cap.Bonk Guy mentioned that EMBER is the main Launchpad based on Meteora, supporting the use of SOL, USDC, and over 150 tokenized stocks as paired assets for issuing tokens, and employs Meteora Dynamic Bonding Curve technology, while also providing features such as token tax distribution, Daily Jackpots, and DAO governance.According to his disclosure, Ember recorded about 51.7 million dollars in trading volume and 561,000 dollars in fees within 3 days of launch, with a total of 2,041 tokens issued, over 41,800 unique wallet addresses, and 149,000 Solana transactions. Bonk Guy compared his purchase of Ember to his previous trade in PONS, stating that he first saw PONS when its market cap was below 1 million dollars, similarly ignoring it for a whole day, and then began buying in at around a 4 million dollar market cap. Rather than whether a popular token has already emerged, it is more important to observe the real usage data underlying the Launchpad.Additionally, Bonk Guy stated that both Robinhood Chain and BNB Chain have multiple successful Launchpads, and that Solana's meme trading ecosystem has developed over a longer period, so there is no reason to believe that Solana can ultimately only accommodate one successful Launchpad. He also mentioned that his trading decisions are not based on market consensus. Some of his past most successful trades often came from identifying opportunities before the market formed a consensus; by the time everyone recognizes it, the asymmetric upside potential is usually significantly reduced.Regarding the recent controversy, Bonk Guy stated that the claim "EMBER has over 50% of Bubblemaps address clusters" has been clarified by Bubblemaps; his previous statement that Ember "was launched by Meteora" is also inaccurate, with a more accurate description being that Ember is based on Meteora's related infrastructure, which is now included in the Meteora ecosystem page. Bonk Guy emphasized that he has no relationship with the Ember team, and EMBER is a personal trade for him.

According to official news, the Gate Launchpool Phase 375 MarsCat (MCAT) event is currently underway and will last until September 24 at 20:00 (UTC+8). Users can stake USDT, GT, or MCAT to share 2,000,000 MCAT tokens for free, with the current prize pool exceeding one million dollars. Among them, the total amount of USDT staked has reached 83,708,714.6 USDT, with an estimated annualized return rate of 13.69%; the estimated annualized return rate for the GT staking pool is 174.53%; and the estimated annualized return rate for the MCAT staking pool is 7522.57%.In addition, the Gate Launchpool CP and ALIGN events are simultaneously ongoing, with three major Launchpool activities running in parallel, providing users with diverse staking options. In the Gate Launchpool CP event, the total amount of ETH staked has reached 15,974.39 ETH, with an estimated annualized return rate of 3.15%; the estimated annualized return rate for the BTC staking pool is 1.41%; and the estimated annualized return rate for the CP staking pool is 61.65%. In the Gate Launchpool ALIGN event, the total amount of USDT staked has reached 137,165,777.41 USDT, with an estimated annualized return rate of 4.76%; the estimated annualized return rate for the GT staking pool is 0.96%; and the estimated annualized return rate for the ALIGN staking pool is 116.85%.

According to the official announcement, Bitget has launched perpetual contracts for 4 stocks: FCX (Freeport-McMoRan), BHP (BHP Group), RIO (Rio Tinto), and VALE (Vale S.A.).The above contracts are settled in USDT, support up to 20 times leverage, and are available for trading 24/7. As of now, Bitget supports a total of 310 stock perpetual contract underlying assets.

GLM-5.3-Flash has become the most frequently used and popular model on the B.AI platform, with a cumulative token throughput exceeding 2.41 trillion.As the first native multimodal model in the GLM-5 series, GLM-5.3-Flash features a total of 320 billion parameters and 18 billion active parameters, employing a hybrid architecture that combines sparse and linear attention, supporting 1 million ultra-long contexts, while ensuring rapid response, powerful reasoning, and high cost-effectiveness.Starting today, developers can still call this model for free through the B.AI platform, covering diverse scenarios such as high-frequency APIs, code writing, complex agents, and ultra-long document processing.