Skip to content
News on crypto, fintech and digital infrastructure

Search results for «Vulnerabilities»

  1. PHP2Shell Vulnerabilities Trigger PHP Emergency Patches for CVE-2026-109618 and CVE-2026-109619

    PHP issued out-of-cycle patches on October 21, 2026, for two critical remote code execution flaws in the core engine. All versions from 5.4 onward require updates.

  2. Initia Exploit Forces Layer 1 and Rollups Halt After MoveVM Theft

    Initia paused its Layer 1 and all rollups on October 23, 2026, after a MoveVM exploit allowed an attacker to mint unbacked bridged assets worth roughly $2.7 million.

  3. CISA KEV Adds Arista VeloCloud Orchestrator CVE-2026-114625 to Catalog

    CISA added the Arista VeloCloud Orchestrator SQL injection vulnerability to its Known Exploited Vulnerabilities catalog on October 23, 2026.

  4. ICANN PHP Vulnerability Prompts Site Restorations and DNSSEC Automation Consultation

    ICANN restored three PHP-based websites on October 22 after addressing critical vulnerabilities and continues a public consultation on DNSSEC delegation signer automation.