Hedera developer Hashgraph moderates a bank privacy panel with Citi, JPMorgan's Kinexys, Bank of America and Morgan Stanley in New York this week.
Morgan Stanley and Citi host the two-day workshop.
@hedera
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
At the centre of the shutdowns is something most of us have never heard of, but use every day.
PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password.
Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity.
Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving.
Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours.
Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline.
Websites have gone dark worldwide, from government portals and hospitals to banks.
CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit.
Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each.
Over 1.1 million use older versions no longer receiving official PHP updates.
Older installations may need an upgrade to a supported PHP version or a fix from their software provider.
And patching does not remove a backdoor an attacker may already have planted.
Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections.
But PHP isn’t the only security story unfolding.
-Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers.
-India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”.
-State Bank of India confirmed 3,897 customer records on the dark web.
-Criminals used AI agents to break into 400+ Latin American banks.
-Capcom confirmed a breach exposing 11.7 million email addresses.
-GitLab disclosed a 10/10 severity flaw in versions going back to 2014.
-LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets.
None of these has a confirmed link to PHP2Shell.
We’re seeing separate breaches unfold together.
The true number of incidents could take months to come out.
The world is still on alert. Attacks are still coming.
MAJOR U.S. BANKS DETECT UNAUTHORIZED AI AGENTS ACCESSING CUSTOMER ACCOUNTS — AXIOS
Major banks, including $JPM, $BAC, $MS and $WFC, are confronting security risks from third-party AI agents accessing customer accounts, according to Axios.
Some agents have reportedly attempted actions beyond user instructions, raising concerns about unauthorized transactions and fund transfers.
Morgan Stanley has begun blocking third-party agents, while JPMorgan, Bank of America and Citi are restricting access.
Banks warn they cannot reliably distinguish legitimate user activity from autonomous AI agents, even when customers have voluntarily shared their credentials.
The value of a network grows as more people and institutions use it.🌐💸
XRP is no exception.🗣️
Its long-term growth depends on network effects, where every new bank, payment provider and application that joins makes the network more useful for everyone already on it.🔌
The video below explains why, once those network effects truly begin, they will drive significant value toward XRP's price.👇
NEAR adds XRP support on https://t.co/XwUoGVdw3B, enabling deposits from the XRP Ledger, swaps and payments with confidentiality by default.
Recipients receive funds without seeing the sender’s address or transaction history.
@NEARProtocol
JUST IN: SEC clears Evernorth filing to raise funds for more $XRP
The filing would allow Evernorth to raise capital through share sales to expand its XRP holdings, though the reported clearance does not necessarily mean the fundraising has been completed.
The GENIUS Act marks a watershed moment in American finance, further cementing the United States as the crypto capital of the world. Just as President Abraham Lincoln’s National Currency Act of 1863 established a national framework for bank-issued currency, the GENIUS Act establishes a federal framework for payment stablecoins in the digital age.
The @USOCC's final rule carries that landmark legislation forward, providing a clear, practical foundation for private-sector innovation, competition, and American leadership in digital assets.
JUST IN: Ripple Prime enables 24/7 institutional stock trading with $RLUSD collateral
The move brings round-the-clock access to stock markets for institutional clients, with Ripple’s stablecoin accepted as collateral through its prime brokerage platform.
BREAKING: Germany's Sparkassen, a group with more than 50 million customers, now offer XRP trading in their app through DekaBank, starting at five banks.
XRP is one of five launch coins, with Bitcoin, Ether, Solana and POL.
@XRP
MASSIVE DEVELOPMENT: For First Time, Zelensky Says He's Ready To Accept Peace Deal Where Ukraine Keeps 75% Of Its Territory!
Russian Duma Member Victor Bout Joins The Broadcast LIVE To Break Emerging Details!
Get In Here!
BREAKING: Two critical security flaws in PHP, the programming language behind much of the internet, are forcing governments to take websites offline, per the BBC.
The flaws were found by AI. Security firm Wiz called them the “most severe vulnerabilities ever discovered” by the technology.
LATEST: 💰 Standard Chartered has signed definitive agreements to acquire 100% of Zodia Custody, folding the crypto custody firm into its Securities Services unit, pending regulatory approvals.