← The Polylog Crypto Intelligence Brief
Morning Edition · Thursday, October 22, 2026Published at 1:48 AM EDT · New York
Leaked PHP Flaws Force Emergency Patches as Binance Founder Warns Crypto Users About Compromised Websites
Both bugs carry a 9.2 severity rating and are known together as PHP2Shell. Because they sit in the PHP runtime itself, sites running WordPress or Magento are exposed even when their own code is secure.
PHP's maintainers released emergency patches on October 21 for two remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. The first comes from how PHP handles running out of memory. The second lets data left over from one web req…
Continue the Crypto Intelligence Brief
Track on-chain flows, protocol shifts, stablecoins, and regulation.
- 5 crypto intelligence signals a day
- Tracked crypto trends, day over day
- Stablecoin and regulatory movement
- Source-grounded analysis with confidence labels
The Global Intelligence Brief stays free.
Part of a tracked trend
Unaudited Open-Source Crypto Code Surfaces at Scale
Coordinated volunteer and AI-assisted review keeps exposing large backlogs of undiscovered defects in the open-source libraries that wallets, nodes and protocols depend on, so disclosure waves — not novel attacker research — become a recurring driver of emergency patches and incident risk across the ecosystem.
Townsquare
Start a discussion in Townsquare.
More from this edition
- Solana Switches From TowerBFT to Alpenglow, Targeting 150-Millisecond Finality
- Aztec Discloses a Critical Proving-System Flaw in Alpha V5 and Says It Cannot Tell Whether Anyone Exploited It
- OCC Finalizes Its First GENIUS Act Stablecoin Rule, and Active Issuers Will Need a Waiver to Keep Issuing After January 18
- Rekt Post-Mortems Trace Bitget's Nine-Figure Loss and the SingularityNET Bridge Drain to Trusted Keys and Third-Party Tools
- Ledger Devices Sold Through Reseller CryptoBilis Carried an LTE Implant That Sent Recovery Phrases to Attackers
- SEC Names Three Applicants for Tokenized Stock Venues Under Its Innovation Exemption, Including the OKX and ICE Joint Venture
- Aztec Targets the End of 2030 for Full Post-Quantum Migration as an Ethereum Researcher Measures the Sender's "Free Option" in Encrypted Mempools
Comments
0No comments yet.