LongViewCompute retweeted
⚠️ ALERT: More “Black October” PHP2SHELL breach reports are emerging, including a massive new allegation involving PwC.
Everest group claims to have stolen 590.69 GB of PwC files, including sensitive employee and HR data.
Many other verified breaches have emerged such as Capcom's exposure of 11.77 million email addresses, and Onamae Cloud's discovery of malware on customer servers.
These incidents are a reminder to do our part to protect our accounts.
Here are 5 precautions to take to stay safe:
1. Expect fake “Breach alerts”
“Your account was exposed.”
“Install this emergency security update.”
“Verify your details to avoid suspension.”
A real incident gives scammers a believable story.
Open the company’s app or use a saved bookmark to check. Don’t use the link or phone number supplied in an unexpected message.
2. Don’t install a “PHP security patch” from a message
PHP2Shell is a server-side problem. Ordinary visitors do not need to install PHP software on their phone or laptop to browse.
Keep your browser, operating system and apps updated through their built-in settings or official stores.
Do not follow a website’s instructions to paste commands, install certificates or disable security protections to “fix” this incident.
3. Check your accounts for changes
Look for unfamiliar devices, changed recovery details, unexpected purchases and messages you didn’t send.
For email, check forwarding rules and filters too. An attacker can use them to keep receiving your messages.
4. Secure your main email first
Your inbox receives password-reset links for other accounts.
Give it a unique password, review its recovery email and phone number, and enable a passkey or two-factor authentication.
5. Use passkeys where available
Passkeys resist fake login pages because they are tied to the genuine service.
Where passkeys aren’t available, enable two-factor authentication. Prefer a security key or authenticator app where supported.
We can’t prevent every company breach. But unique passwords, passkeys and quick action can help stop one breach from spreading to our other accounts.
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
At the centre of the shutdowns is something most of us have never heard of, but use every day.
PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password.
Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity.
Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving.
Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours.
Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline.
Websites have gone dark worldwide, from government portals and hospitals to banks.
CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit.
Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each.
Over 1.1 million use older versions no longer receiving official PHP updates.
Older installations may need an upgrade to a supported PHP version or a fix from their software provider.
And patching does not remove a backdoor an attacker may already have planted.
Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections.
But PHP isn’t the only security story unfolding.
-Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers.
-India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”.
-State Bank of India confirmed 3,897 customer records on the dark web.
-Criminals used AI agents to break into 400+ Latin American banks.
-Capcom confirmed a breach exposing 11.7 million email addresses.
-GitLab disclosed a 10/10 severity flaw in versions going back to 2014.
-LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets.
None of these has a confirmed link to PHP2Shell.
We’re seeing separate breaches unfold together.
The true number of incidents could take months to come out.
The world is still on alert. Attacks are still coming.
LongViewCompute retweeted
🚨 JUST IN: Fireblocks disputes Axios’ report of $2.5B Visa acquisition talks.
“This is news to us, and not true at present time,” the company told Cointelegraph.
Visa declined to comment on rumors or speculation.
LongViewCompute retweeted
amazing. trading securities onchain is the future.
Temple Digital Group has selected @tZERO as our ATS and technology provider for onchain tokenized securities.
Under the agreement, Temple Digital Group will integrate tZERO's regulated operating technologies, including client onboarding and transaction services, letting Temple bring tokenized securities trading to our clients.
“Institutions building tokenized markets need a regulated operating foundation that can work with their technology and business model,” said Alan Konevsky, Chief Executive Officer of tZERO. “Temple has developed one of the most powerful trading systems on Canton. By bringing our broker-dealer and ATS capabilities to that system, we can help Temple deliver its offering to clients while expanding the reach of tZERO’s Infrastructure-as-a-Service business.”
“We’re focused on developing regulated, onchain trading technologies for tokenized assets,” said Evan Varsamis, Chief Executive Officer of Temple Digital Group. “Working with tZERO allows us to combine our solutions with an established broker-dealer and ATS operator, providing the regulated infrastructure needed to support securities on our platform at scale.”
LongViewCompute retweeted
Don't Miss Tonight's Episode Of @CryptoVerdictTV
@blackrue @DPGmaximus @LongViewCrypto @Crux_of_Crypto @RobbMass #crypto solana:ZBCNpuD7YMXzTHB2fhGkGi78MNsHGLRXUhRewNRm9RU ethereum:0x7420b4b9a0110cdc71fb720908340c03f9bc03ec chain-2:native
🤖 Made with AI
LongViewCompute retweeted
🚨Pending Home Sales crash to the lowest level in history
US pending home sales fell 7.3% in September to a record low of 66.0, dropping below the levels of the 2008 financial crisis and the COVID pandemic.
Over 1.6 million homes remain without buyers as US housing inventory hits its highest level in 7 years.
US housing affordability is near its lowest level in 40 years as mortgage rates hit 7.61% in early October.
US home sellers outnumber buyers by 63% marking the widest gap in over a decade.
The US housing market is facing a historic demand freeze due to high borrowing costs and elevated home prices.
LongViewCompute retweeted
Progmat is preparing Canton tests for tokenized Japanese government bonds.
The sandbox will use test versions of bonds, tokenized deposits and stablecoins. A November start is targeted once connections are ready.
cantonnews.org/progmat-plans…
LongViewCompute retweeted
🚨MORE RED: The "Black Thursday" selloff extends to Wall Street as $790 BILLION is wiped from the U.S. stock market at the open.
The losses follow a nearly $1 TRILLION wipeout across six major Asian markets earlier in the day.
BREAKING: Asia’s stock market wiped out nearly $1,000,000,000,000 across six major markets today.
Everyone's calling it a "Black Thursday."
LongViewCompute retweeted
“A token is not equity. But equity can be a token.”
That distinction changes everything about tokenized stocks.
Our CEO @Joris_DLN on why the official shareholder register matters, from yesterday’s webinar with @CantonStrategic 👇
LongViewCompute retweeted
Look who it is folks…😎👇🏾
My man @Joris_DLN sat down with $CNTN CEO Mr @MarkWendlandCSH and Mr Mark Toomey! @MachoMarko
@fairmint 🔥🔥🔥 @CantonStrategic
“A token is not equity. But equity can be a token.”
That distinction changes everything about tokenized stocks.
Our CEO @Joris_DLN on why the official shareholder register matters, from yesterday’s webinar with @CantonStrategic 👇
LongViewCompute retweeted
Thrilled to share I'm joining @The_DTCC as Senior Principal Architect, Digital Assets, leading their @CantonNetwork strategy. Starting Oct 26.
I am so thankful for the people who believed in me along the way, especially @viv_diwakar who got me interested in Canton years ago. More to come soon!
#RWA #DigitalAssets $CC
LongViewCompute retweeted
It is true that tokenized deposits will only flow between whitelisted wallets that are already customers of the relevant bank. However they will be very useful as the cash leg of atomic swaps for tokenized assets (for instance Treasuries and equities to facilitate repos and stock loans). To say that tokenized deposits are purely performative is intellectually dishonest.
Yes, a stablecoin that holds only treasury repo and short duration bills or even central bank money with everything held on-chain would be a more useful and robust cash leg (other than the fact that it doesn’t pay interest!). Of course that doesn’t exist. JPMD and other money center bank deposits will be viewed as lower risk than stablecoins in their current state by institutions and will likely be the go-to solution for repo and stock loan. It’s possible an orchestration layer will be built to facilitate the preferences of different institutions for different deposits and a stablecoin could be part of that. Will be interesting to see how it evolves.
Once again Yuval resorts to personal attacks on me without fully engaging on a complicated topic. (He also has some weird fetish about mine being a teacher, but that's his business).
So let me elaborate my critique of the utility of tokenized bank deposits like JPMD in simple language that hopefully he can understand.
The biggest difference between the liability of a fractionally-reserved bank and that of a narrow bank (aka stablecoin issuer) is run risk. Levered banks live under constant threat of runs, narrow banks don't.
Due to run risk, a tokenized deposit can never be a bearer instrument. The bank must know who every token holder is at all times to manage the FDIC (or foreign equivalent) insurance limit. Otherwise a single customer could put $1m into 4 wallets and quadruple their insurance, thus Sybil Attacking the FDIC.
Also due to run risk, tokenized deposits cannot be allowed to trade freely in the secondary market. Stablecoins like USDT and USDC have micro-depegs all the time due to liquidity, but nobody cares because they are fully reserved. A tokenized deposit having even the slightest depeg could cause a run on the entire bank.
Run risk is why bank deposits have opt-in ownership (everyone must be KYC'ed) but stablecoins have opt-out (almost nobody does, unless there is a law enforcement action).
And BTW, every single senior bank exec (including at JPM) and bank regulator I've ever discussed this issue with agrees with my logic. The concept of a tokenized deposit moving as freely as a stablecoin is terrifying.
This is also why stablecoin issuers have gone out of their way to promote their liability for agentic use while banks have outright banned it.
Yuval's point about "stablecoin issuers also holding deposits" is irrelevant since they are fully reserved.
He also seems to imply the law will change to force stablecoins issuers to also have to KYC every holder. Genius doesn't touch this, nor does any regulator I know. This change would destroy stablecoin utility.
Now, knowing all of this, why do I think products like JPMD are mostly innovation theater? Because you literally can't do anything with them you couldn't also do with an API and 30 year old database tech inside JPM.
You can't use JPMD in DeFi unless you are only trading with other JPM customers and only against other assets directly on JPM's balance sheet. Why you'd want to pay Ethereum gas fees and deal with 12 second slot times to do the same thing the bank can handle instantly for free is beyond me.
Also, any swap of JPMD against a different asset (say ETH) runs the risk of JPM refusing to honor the deposit swap leg of the transaction. This swap isn't atomic and has high settlement risk.
Can stablecoin issuers also do this and interfere in DeFi? Yes, but they go out of their way not to, because having their coins featured in DeFi is great for business - unlike for banks.
Also, stable issuers don't know who 99% of token holders are, so have no basis to interfering. Banks know who every depositor is and have a long history of censoring, including against the crypto industry.
I'm guessing the reason Yuval is upset about my post is because JPMD is soon coming to Canton. That deployment actually makes sense. They should definitely do it.
Canton is just a database with a button. JPMD is an asset with a button. Both feature a single entity, possibly a single person, who can endogenously void holder rights at any time. Thus both have infinite settlement risk.
Infinity multiplied by infinity is still infinity.
Simple math that even a non-academic could understand.
LongViewCompute retweeted
Looks like the @The_DTCC Spun Up another Validator Node...Yessah Robert!!!
Nice find my man!!!! 🫡
DTCC 3 spun up this morning
ccdata.noves.fi/party/DTCC-V…
LongViewCompute retweeted
Digital Asset has partnered with The Value Exchange on a report, The Case for Tokenized Equities, examining how the market is developing and what it will take to support broader adoption.
Tokenised equities already represent billions of dollars held by more than 300,000 investors, with institutional activity growing alongside a fast-growing retail market.
That scale is pushing infrastructure, regulation and operating models into sharper focus.
The report also covers market development across retail and institutional investors, operational opportunities in settlement, and the regulatory considerations shaping what comes next.
Read the full report: blog.digitalasset.com/blog/t…
.@trize_io has integrated @chainlink's Cross-Chain Interoperability Protocol (CCIP) into its tokenization infrastructure on the @CantonNetwork.
Completed in technical collaboration with Chainlink, the integration supports tokenized asset transfers from supported EVM networks to Canton and from Canton to those networks.
T-RIZE's infrastructure operates natively on Canton, using its transaction privacy and synchronized execution for institutional financial workflows. Cross-network use remains subject to each instrument's permissions, custody arrangements and lifecycle requirements.
Full announcement: t-rize.io/news/T-RIZE-Integr…
#Chainlink #CantonNetwork #Tokenization
LongViewCompute retweeted
Korean regulation now permits financial institutions to bring domestic equities like SK Hynix and Samsung onchain, with a February launch.
@YuvalRooz discusses with @Official_Upbit why Korea’s retail base could be the catalyst for institutional adoption.
youtube.com/watch?v=7C3KkcRR…
LongViewCompute retweeted
Canton Coin’s supply works much like Ethereum’s or Solana’s, unlimited in theory but stable in practice.
For $CC, fully diluted value and market cap are effectively the same number.
We break down how supply adjusts and reaches equilibrium over time.
canton.network/blog/canton-c…
LongViewCompute retweeted
Crypto Verdict: Bitcoin’s $85K Showdown! XRP & Memes Dominate? 5 Experts Debate xitter.cf/i/broadcasts/1RJZzBEZr…


































