Lookonchain APP

App Store

China's Ministry of Industry and Information Technology (MIIT) National Vulnerability Database (NVDB) issues a risk advisory on preventing critical PHP remote code execution vulnerabilities.

51 minutes ago

China’s Ministry of Industry and Information Technology (MIIT) Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) has detected two critical remote code execution vulnerabilities in PHP, posing severe risks. PHP is an open-source server-side scripting language widely used in web development. The two critical flaws allow unauthenticated attackers to execute arbitrary code remotely, leading to server compromise, sensitive data leaks, service disruptions, and other harms. Affected PHP versions include: 8.5 series prior to 8.5.12, 8.4 series prior to 8.4.27, 8.3 series prior to 8.3.36, 8.2 series prior to 8.2.35, and all 8.1 series and earlier versions. The PHP security team has patched the vulnerabilities and released a security advisory. Relevant organizations and users are advised to conduct comprehensive checks immediately, upgrade to the latest secure version promptly, or adopt temporary protective measures such as taking systems offline temporarily, disabling session upload progress functions, network isolation, and network access restrictions. They should also strengthen cybersecurity monitoring and management, promptly update credentials like accounts, passwords, and keys, to mitigate cyber attack risks.

Relevant content

A crypto whale liquidated a $21.15 million long position in Bitcoin, with the funds redirected to Ethereum.

According to TradingBeats monitoring, a large whale wallet starting with 0x469e completed a major position adjustment this morning: it liquidated 250 BTC long positions, actually selling around $21.15 million; meanwhile, it added 5,219.54 ETH long positions, with total transaction value of about $13.06 million. The average closing price of BTC was approximately $84,599.81, generating a profit of around $568,000; the average entry price for the ETH additions was about $2,502.17. Its ETH long positions increased from 10,000 to around 15,200, a rise of approximately 52.2%. Currently, the position value stands at around $37.075 million, with an average price of $2,601.72, still showing an unrealized loss of about $2.522 million. It is reported that ETH has not yet outperformed BTC; the spot ETH/BTC exchange rate is now around 0.02946, down about 8.28% since the start of this month, and has fallen by around 0.64% since October 15. Although there has been a recent recovery from lows, a sustained uptrend has not yet formed.

9 minutes ago

Day 17 of OpenAI’s 28-day product sprint: Quota reset again.

Beating AI News: OpenAI’s Product and Platform Lead Tibo Sottiaux announced that the 28-day product sprint has reached Day 17, and today marks another quota reset. This is the 7th global reset announced since the sprint began, and it is expected to be completed before 1 AM Beijing time on October 23. Tibo also reminded users to apply for Daybreak Blue access in advance, noting the process only takes 15 minutes, and urged them not to wait until a real security incident occurs to do so. Daybreak Blue is a special access permission OpenAI offers to vetted cybersecurity practitioners, enabling AI-assisted vulnerability scanning, malware analysis, and security incident response.

9 minutes ago

Driven by strong risk aversion, the Nikkei 225 index has dropped to a near three-month low.

Affected by strong risk aversion, the Nikkei 225 index fell 2.65% to close at 62907.84 points, marking its lowest closing level since July 30. Analysts at InTouch Capital Markets stated: "Investors are beginning to question whether the performance of the latest round of artificial intelligence (AI) corporate earnings is sufficient to support current elevated valuations, as well as the rationale for companies' continued large-scale investments in computing infrastructure." The analysts added, "Resurgent geopolitical concerns have further exacerbated pressure on the market environment, which is sensitive to economic growth." (Source: Jinshi)

9 minutes ago

DeepSeek's first search test scores 69 points: fact-based question answering is near the top, while complex retrieval ranks third from the bottom.

Beating AI Express News: Independent evaluation firm Artificial Analysis tested DeepSeek’s newly launched search API, including it in a comparison of 27 search products, giving it an overall score of 69 and ranking 17th. The top two products, Exa and Perplexity, both scored 80 points. However, DeepSeek charges just $0.75 per 1,000 successful searches, making it the cheapest among all paid search APIs tested. The evaluation uniformly used GPT-5.6 Luna to call different search APIs to complete fact-based Q&A, in-depth research, and multi-round web searches. After integrating DeepSeek, the overall score rose from 33 points (when offline) to 69 points. DeepSeek performed well in direct fact-finding with an accuracy rate of 70%, just 3 percentage points behind the top-ranked product. But for complex problems requiring repeated searches and clue stitching, its accuracy rate was only 63%, ranking third from the bottom among the 27 products. Additionally, it returns an average of about 7,000 tokens per search. While this provides rich information, it increases the model’s cost of reading and processing materials. The average cost to complete one evaluation task is approximately $0.032, of which search fees account for only $0.0085, while model call fees reach $0.023, making up about 73% of the total cost—the second-highest model cost on the list. Even so, DeepSeek’s total cost per task is still the 5th cheapest. It has pushed search request prices to the lowest level, but lengthy search results have eroded part of its cost advantage.

9 minutes ago

Walmart plans to launch an AI shopping agent feature within a month, allowing users to set spending limits and revoke permissions at any time.

Beating AI News — Walmart plans to roll out its Agent Profiles feature within the next month, allowing AI agents to shop on behalf of users. The retail giant clarified that these AI agents will not access users’ bank card details or modify payment methods. Users can set their own spending limits, track the AI agents’ shopping history, and revoke access at any time. The feature aims to let AI agents execute shopping tasks while retaining users’ control over payment security and spending behavior.

9 minutes ago

Japanese and South Korean stock markets closed lower, with South Korean shares falling more than 4%.

According to Bitget market data, South Korea’s KOSPI index closed down 201.9 points, or 3.52%, to 5533.76 points. SK Hynix fell 5.48%, and Samsung Electronics dropped 4.02%. Japan’s Nikkei 225 index closed down 1713.40 points, or 2.65%, to 62907.84 points.

9 minutes ago

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano