BTC $65,136.34 +2.30%
ETH $1,826.70 +4.45%
BNB $594.92 +3.36%
XRP $0.9683 +7.58%
SOL $72.20 +4.27%
TRX $0.3051 -0.30%
DOGE $0.0592 +5.62%
ADA $0.1542 +6.60%
BCH $209.36 +5.20%
LINK $9.27 +6.64%
HYPE $67.98 +7.40%
AAVE $109.17 +10.90%
SUI $0.7331 +7.10%
XLM $0.1409 +6.73%
ZEC $907.35 +7.70%
AAPL $356.35 +0.06%
AMZN $264.79 +0.94%
GOOGL $294.32 +1.03%
MSFT $522.37 +0.40%
META $635.47 +0.44%
NVDA $164.72 +3.52%
TSLA $389.33 +1.59%
SNDK $863.40 +2.16%
INTC $58.33 +2.37%
SPCX $139.40 +3.51%
MU $767.52 +1.85%
AMD $526.85 +1.71%
BTC $65,136.34 +2.30%
ETH $1,826.70 +4.45%
BNB $594.92 +3.36%
XRP $0.9683 +7.58%
SOL $72.20 +4.27%
TRX $0.3051 -0.30%
DOGE $0.0592 +5.62%
ADA $0.1542 +6.60%
BCH $209.36 +5.20%
LINK $9.27 +6.64%
HYPE $67.98 +7.40%
AAVE $109.17 +10.90%
SUI $0.7331 +7.10%
XLM $0.1409 +6.73%
ZEC $907.35 +7.70%
AAPL $356.35 +0.06%
AMZN $264.79 +0.94%
GOOGL $294.32 +1.03%
MSFT $522.37 +0.40%
META $635.47 +0.44%
NVDA $164.72 +3.52%
TSLA $389.33 +1.59%
SNDK $863.40 +2.16%
INTC $58.33 +2.37%
SPCX $139.40 +3.51%
MU $767.52 +1.85%
AMD $526.85 +1.71%

iou

All
Article
Flash

first_img Apache has a serious vulnerability, and the HTTP/2 service may be subject to remote code execution

A serious security vulnerability has been found in the open-source server software Apache HTTP Server. Attackers can exploit this vulnerability to corrupt server memory by crafting requests when they have access to the affected service, allowing them to execute code with the privileges of the web service process. The vulnerability is located in the HTTP/2 module, and attackers can trigger a concurrent synchronization flaw without authentication, leading to heap memory corruption. If successfully exploited, it allows code execution with the privileges of the Apache worker process and access to data that the process can read.The affected range includes Apache HTTP Server versions 2.4.55 to 2.4.70, as well as mod_h2 versions 2.0.8 to 2.0.42 used separately from GitHub. Red Hat stated that the risk involves servers that enable HTTP/2 through the Protocols directive, including H2 for encrypted connections and H2C for plaintext connections. Administrators need to check both global configurations and individual virtual host configurations; if a CDN or reverse proxy is deployed on the website frontend, it is also necessary to check whether the Apache origin server can be accessed directly via HTTP/2.Apache released HTTP Server 2.4.71 on November 11, 2026, and it is recommended that websites using Apache upgrade immediately. If an upgrade cannot be performed temporarily, HTTP/2 can be disabled as a temporary measure. The issue lies in the assign_headers() function of mod_http2. HTTP/2 allows multiple requests to be processed concurrently over the same connection, and the affected code has a synchronization flaw when handling shared resources, which may lead to heap memory corruption. This vulnerability was discovered by the Anthropic OSS Scanner open-source project and the Google Cloud vulnerability research team. Anthropic reported it to the Apache Foundation on October 26, and the Google Cloud team reported the same vulnerability on November 3.

Grayscale: The various sectors of cryptocurrency are gradually decoupling from Bitcoin's trend, with volatility generally higher than that of Bitcoin

According to a report by Crypto Briefing, Grayscale's research indicates that the correlation between crypto assets and Bitcoin is decreasing, with Bitcoin currently explaining only about 50% of the return volatility across various crypto sectors.The report breaks down the annualized volatility and the impact of Bitcoin-related factors by sector: the annualized volatility of the currency sector is 49%, with 43% attributed to Bitcoin; the annualized volatility of the smart contract platform sector is 58%, with 38% attributed to Bitcoin; the annualized volatility of the finance sector is 59%, with 30% attributed to Bitcoin; the annualized volatility of the utilities and services sector is 67%, with 30% attributed to Bitcoin; the annualized volatility of the consumer and culture sector is 76%, with 46% attributed to Bitcoin; the artificial intelligence sector has the highest annualized volatility at 85%, with only 35% attributed to Bitcoin.The research points out that Bitcoin's own annualized volatility has recently been around 43%, while the volatility of all sectors tracked by Grayscale is higher than that of Bitcoin. The report suggests that lower correlation does not imply lower risk, but the fact that Bitcoin explains only half of the return volatility means that the other half is driven by factors specific to each sector, providing investors with a reference for assessing which sectors can offer true diversification.

NVIDIA appointed 58-year-old Chief Financial Officer Colette Kress as interim CEO, who previously worked at Microsoft for 13 years

NVIDIA's board of directors announced today that co-founder Jensen Huang has resigned from his positions as President, Chief Executive Officer, and Director, effective immediately. The company's current Executive Vice President and Chief Financial Officer Colette Kress will serve as interim CEO while continuing to manage the company as CFO. The board has initiated the selection process for a new CEO, considering both internal and external candidates.The 58-year-old Kress joined NVIDIA in September 2013 and has been with the company for over 13 years, being one of the core management members who accompanied NVIDIA's growth from a graphics chip manufacturer to a global AI chip giant. During her tenure, NVIDIA's annual revenue grew from approximately $4.1 billion in fiscal year 2013 to $21.59 billion in fiscal year 2026.Before joining NVIDIA, Kress worked at Cisco for 3 years and spent 13 years at Microsoft, where she served as the financial leader of the Server and Tools division, and also worked at Texas Instruments for 8 years. She has long been responsible for NVIDIA's financial strategy, capital allocation, performance disclosure, and investor relations, serving as an important representative for the company in communications with Wall Street, and has participated in the company's quarterly earnings call multiple times.

Wintermute: Bitcoin needs to remain cautious before re-establishing above the 50-week moving average at $75,500

Wintermute stated that after the U.S. midterm elections, the Democratic Party regained control of both houses of Congress, and the market began to reassess the regulatory risks faced by the AI industry. The AI trading, which was previously boosted by favorable Washington policies, has started to cool down. If the Federal Reserve raises interest rates during the correction of AI assets, the tightening of liquidity and the decline in risk appetite may simultaneously exert pressure on the cryptocurrency market.In the cryptocurrency market, Bitcoin rebounded to $81,000 last Wednesday but subsequently retraced most of its gains, dropping to a low of $73,500 on Sunday, close to the 200-day moving average of $73,000. Bitcoin's weekly close fell below the 50-week moving average of about $75,500, ending a previous streak of seven consecutive weeks above that moving average. The U.S. spot Bitcoin ETF saw a net outflow of $1.28 billion last week, marking the largest single-week outflow since June and erasing the cumulative net inflow for the year; only Wednesday recorded a net inflow of funds for the week.Meanwhile, over $1 billion in positions were liquidated in the market, with Ethereum's liquidation scale exceeding that of Bitcoin. Altcoins performed even worse than Bitcoin, with NEAR, HYPE, ENA, and LIT all dropping more than 10%. In contrast, ZEC became one of the few large-cap assets to rise against the trend, indicating that there is still some market demand for privacy-focused projects. Looking ahead, the market needs to remain cautious until Bitcoin reclaims the 50-week moving average. If Bitcoin's daily close falls below $73,000 and the 200-day moving average, the next key level to watch will be $68,000, and altcoins that previously rebounded significantly may face greater selling pressure. If Bitcoin's daily close reclaims and stabilizes at $80,000, and the spot Bitcoin ETF resumes weekly net inflows, a shift to a more positive outlook may be possible.In the short term, attention should be paid to the U.S. CPI data for October to be released on Tuesday, with core CPI expected to rise by 0.2% month-on-month. Additionally, Cisco and Applied Materials will report earnings on Thursday, U.S. PPI data will be released on Friday, and NVIDIA is scheduled to announce its financial results on November 17. The Federal Reserve will hold a meeting on interest rates from December 8 to 9, with the market currently estimating a probability of about 77% for an interest rate hike.
app_icon
ChainCatcher Building the Web3 world with innovations.