News · Cointelegraph

PHP flaw shows AI ‘vulnerability apocalypse’ is on schedule: Immunefi CEO

Immunefi CEO Mitchell Amador warned that internet users remain exposed to exploits from the PHP vulnerability for weeks, particularly through smaller websites slow to install the emergency upgrade shipped last Wednesday. He said finding vulnerabilities has become cheap while fixing them remains expensive, and advised users not to reuse passwords, to be cautious when connecting crypto wallets to websites, and to revoke unrecognized token approvals. Cloudflare’s CEO Matthew Prince said its network saw millions of exploit attempts in the 24 hours after the flaws were disclosed and thousands even before. PHP powers about 69% of websites with a known server-side language, according to W3Techs, and the FBI warned the flaws may allow attackers to remotely execute code.

Summary written by Upside AI from the original article. Read the source for full details.

Read the original on Cointelegraph ↗

Keywords

cybersecuritycryptoartificial intelligencesoftware

Open a keyword to see other news on the same topic.

Related news

  • Semperis Deepens Microsoft Security Collaboration, Integrating the Lightning Platform with Microsoft Sentinel and Security Copilot

    Semperis announced on October 26, 2026 a deeper collaboration with Microsoft, as its Lightning Platform integrates with Microsoft Sentinel and Security Copilot. The integration uses Microsoft-native components such as Azure Functions, Log Analytics tables, KQL and MCP to bring identity context, including attack paths, Tier 0 exposure, posture indicators and hybrid identity telemetry, into Sentinel. Security teams can therefore query and act on identity risk without leaving the Microsoft environment. Semperis has also built custom Security Copilot agents that use KQL over Lightning tables to return risk and posture summaries and identify exposed paths, and these agents can be published on the Microsoft Security Store. The collaboration builds on Semperis' membership in the Microsoft Intelligent Security Association and its designation as a Microsoft Certified Security Software vendor. CEO Mickey Bresman said security teams need identity context within the tools they already use.

    Yahoo Finance·cybersecurityMSFTsoftware
  • Cybersecurity Stocks Rise as Evercore Survey Flags Strengthening Demand: Okta, CrowdStrike and Palo Alto Climb 4%

    Evercore ISI's quarterly channel survey found a strengthening budget outlook for cybersecurity, and Okta rose 4% to $209.48, CrowdStrike 4% to $247.19 and Palo Alto 4% to $367.89. Partners described healthy pipelines and saw no demand cliff ahead, with spending focused on data and AI security, identity protection and cloud environments. Okta showed the strongest pipeline momentum among the vendors surveyed. The First Trust NASDAQ Cybersecurity ETF rose 1% to $103.94, and the Invesco QQQ Trust gained 0.57% to $708.52. The article stresses that survey data reflects partner sentiment, so reported vendor results are needed to confirm the trend.

    Yahoo Finance·cybersecuritysoftwareETF
  • Copilot Readiness Assessments Help Regulated Organizations Check Sensitive File Access

    According to a press release from eSoftware Associates (ESW), Microsoft began rolling out a Microsoft Purview data loss prevention control for Microsoft 365 Copilot in its government clouds in June 2026, blocking responses when a prompt pulls in sensitive data. The control works on top of existing access permissions, so Copilot can still surface content a signed-in user is allowed to open, including files shared more broadly than intended. ESW advises regulated organizations to pair a readiness assessment, a free five-minute diagnostic across six areas that produces a prioritized 90-day plan, with a review of actual access in Microsoft 365. Priority checks include sensitive files shared org-wide, finished project sites, and guest accounts from past vendors.

    Yahoo Finance·MSFTartificial intelligencecybersecurity
  • What Is ServiceNow (NOW) Really Launching With Its New Governed AI Agent?

    ServiceNow and NVIDIA launched Arc, a long-running personal AI agent for enterprises, with general availability announced on October 22, 2026. Arc runs under a joint governance setup linking ServiceNow workflows to NVIDIA OpenShell and BlueField hardware controls, including hardware-enforced runtime policies and rapid kill-switches to limit ungoverned AI activity. The article ties the launch to ServiceNow's AI ACV expansion and security workflow plans. The clearest proof point to watch is whether ServiceNow discloses more AI ACV figures after the Q2 2026 US$1b mark and links a visible share of them to Arc and related products.

    Yahoo Finance·NOWartificial intelligencesoftware
  • SUSE Brings Sovereign Control to Enterprise Agentic AI with NVIDIA

    SUSE introduced new capabilities that let enterprises adopt private AI while keeping full operational control, security, and governance over their systems, through SUSE AI Factory with NVIDIA. The release adds zero-trust agent security via the NVIDIA OpenShell Reference Architecture, with supervisor proxies inspecting agent traffic and blocking unauthorized requests. SLES for NVIDIA gives immediate access to NVIDIA's latest hardware on a SLES 16 base. SUSE is a launch partner for the OpenShell architecture, and a government Secretariat is testing the platform for AI-driven public services.

    Yahoo Finance·softwareNvidiaartificial intelligence
  • Better Artificial Intelligence Stock for 2026: C3.ai vs. SentinelOne

    The article compares C3.ai, which sells enterprise AI applications, with SentinelOne, which provides AI-powered autonomous cybersecurity. In fiscal 2026 (ended April 30), C3.ai's revenue was nearly $250.3 million, down 35.7%, with a net loss of $470.4 million and negative free cash flow of $190.7 million. SentinelOne's fiscal 2026 (ended January 31) revenue reached $1.0 billion, up 21.9%, with a net loss of $450.7 million and free cash flow of about $75.9 million, though stock-based compensation equaled roughly 388.4% of operating cash flow. The article cites C3.ai's restructuring plan from February 2026 and long government sales cycles as risks, and SentinelOne's competition from larger vendors and reliance on Amazon hosting. It says SentinelOne trades at a lower valuation relative to sales, while C3.ai has no future earnings estimates.

    Yahoo Finance·artificial intelligencesoftwarecybersecurity

Related markets

Crypto →

Latest news

  • FTC and 20 states sue Dollar General, alleging retailer overcharged shoppers

    The Federal Trade Commission and 20 states sued Dollar General, accusing it of charging customers more than the prices displayed on shelves, price tags and in advertisements. The complaint says thousands of stores extracted millions of dollars in unlawful overcharges and that the company received “tens of thousands” of consumer complaints without adopting policies to fix the problem. Dollar General shares fell about 4% after the announcement, and the company did not immediately respond to a request for comment. The suit comes as shoppers look for discounts amid elevated food and gas prices, ahead of next week’s midterm election.

    CNBC·retailFTCregulation
  • Is the Buffett Indicator Flashing a Warning Sign to Stock Market Investors?

    The Buffett indicator, which divides the total value of U.S. stocks by GDP, stands at 234%, near its record high and well above the roughly 135% reached during the dot-com bubble. The CAPE ratio is 40.6, higher only in the dot-com period, while the S&P 500 has grown at an annualized pace of roughly 15% over the past 10 years, versus a historical average of 10%. The author argues the indicator ignores overseas revenue of large U.S. companies and the rapid expansion of liquidity, with M2 rising from $6.9 trillion to $23.3 trillion, so he does not see it as a clear warning sign. The author also says investors should not use it as a tool to time the market, since the S&P 500 has posted gains over every rolling 20-year period.

    Yahoo Finance·▼ QQQ▼ SPYvaluationS&P 500money supply
  • Rockefeller Adds J.P. Morgan Team in Houston

    Rockefeller Capital Management has added a seven-member Houston team from J.P. Morgan to its Global Family Office division, led by managing directors Chris Sheets and Forrest Green. According to a Forbes Best-in-State advisor ranking, the team previously managed $1.4 billion in assets and had been with Bernstein Private Wealth Management before joining J.P. Morgan in 2018. The move follows Rockefeller’s earlier-this-month addition of The Kellam Group, a Naples, Fla.-based team from Truist. Rockefeller oversees about $237 billion in client assets.

    Yahoo Finance·JPMorganasset managementbanks
  • Shopify “Has Not Grown Into Its Multiple at All” as Investors Pay 112 Times Profits

    Shopify shares rose 33% in a month following Meta’s Muse deal, before ATB Cormark downgraded the stock to Sector Perform. On the We Study Billionaires podcast, Daniel Mahncke argued the rally came mainly from earnings roughly doubling, while the premium investors pay stayed at about 112x operating profits. Normalized EPS rose from $0.73 in 2023 to $1.43 in 2025, and the forward P/E of 80x is close to its 3-year average of 74x. Operating margin climbed from 3.7% to 16.4%, but subscription gross margin fell to 79.7% as cloud and AI costs rose $37 million. The article says the valuation depends on AI shopping agents keeping growth strong, with third-quarter results as the first test.

    Yahoo Finance·Shopifyvaluationearnings
  • Tokenized Stock Trading Has Been a Big Hit Overseas. So Why Are Some Publicly Traded Companies in America Objecting?

    Robinhood has launched tokenized stock trading in over 120 countries this year but has not yet received U.S. approval. Tokenized stocks are blockchain tokens representing ownership of conventional shares that can be traded 24/7 across borders, yet holders lack voting rights and direct cash dividends because a custodian bank holds the underlying shares. Microsoft, Verizon and McDonald’s are among a growing list of large companies that have filed to bar tokenization of their shares, arguing platforms cannot issue synthetic versions without consent and that the practice compromises investor safety and corporate governance. In September, the SEC issued an “innovation exemption” letting qualifying platforms trade tokenized stocks in the U.S. for up to five years, but it requires equal rights for holders and gives companies 30 days to object. The article suggests Robinhood is unlikely to bring the feature to U.S. investors soon given nearly two dozen major objectors, though its overseas growth remains worth watching.

    Yahoo Finance·cryptotokenized stocksRobinhood
  • Geopolitical tensions complicate the gold bull case, says AHG president

    Max Baecker, president of American Hartford Gold, says Middle East tensions are complicating the gold outlook, even as central bank buying supports demand. He argues higher energy prices could fuel inflation and tighter monetary policy expectations, strengthening the dollar and weighing on gold, which is why gold does not always rise during a geopolitical crisis. He notes central bank buying has roughly doubled from its pre-2022 average, and the People's Bank of China has increased its gold reserves for 23 consecutive months, with Chinese net gold imports reportedly reaching 316 tonnes in the first quarter. In the near term, he says the Fed sets the pace of gold's moves rather than its direction.

    Yahoo Finance·• PAXG/USDT• XAUT/USDT• XAU/USDgoldgeopoliticscentral bank

All news →

Get the briefing on Telegram or Zalo

Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.