A series of security vulnerabilities have been disclosed in internet infrastructure software within a single day, affecting PHP, Node.js, and Go.

Decentralized data network for AI agents Dataline has closed a $10.6 million seed round, co-led by Lattice and Samsung-backed Dispersion Capital, with participation from Symbolic Capital, Coinbase Ventures, Anagram, and Robinhood co-founder & CEO Vlad Tenev, among others. The round, completed in April, utilized a SAFE agreement with token warrants; valuation was not disclosed. Dataline is now live, covering approximately 50 data sources to deliver on-chain and off-chain data, and scores data reliability, timeliness, and consistency using AI. Proceeds will be allocated to expanding data sources, enhancing data validation, and expanding into robotics, AI training data, and other sectors. Dataline plans to launch a token by the end of 2026 for network payments and data access, and intends to conduct a public token sale on Base via Uniswap’s Continuous Clearing Auction (CCA) system, with details set to be revealed next week. The public sale’s target fundraising amount, token quantity, and other terms remain undisclosed.

White House officials said on October 21 that Trump planned to focus on the U.S. government’s actions to crack down on overseas crypto fraud rings during the White House’s cybersecurity event that day, including recovering funds and shutting down fraudulent operations. These transnational criminal groups steal funds from U.S. citizens via romance scams, phishing, ransomware and other methods. The U.S. government noted that law enforcement agencies have seized approximately $833 million in crypto assets linked to overseas fraud, and shut down 503 fraudulent crypto websites under the supervision of the Homeland Security Task Force. Relevant authorities have also notified nearly 9,000 U.S. citizens to alert them they are being targeted by fraud. The U.S. Treasury Department previously announced the establishment of an inter-agency "Fraud Strike Task Force" to target "pig butchering" scams run by organized criminal groups in Myanmar, Cambodia, Laos and the Philippines. Since last year, the U.S. has also imposed multiple sanctions aimed at cutting off support for related fraud websites and their infrastructure.

Crypto journalist Eleanor Terrett reported that the American Bankers Association (ABA) has voiced dissatisfaction with the final rules implemented by the U.S. Office of the Comptroller of the Currency (OCC) under the GENIUS Act. The OCC abandoned the previously proposed restrictions on stablecoin yields, a move the ABA argues will "maintain the status quo for crypto platforms." The ABA’s CEO stated: "It is a mistake to wait until deposit outflows and economic harm have already occurred before attempting to address these issues."

Node.js rolled out a security update on October 21, covering its 26.x, 24.x, and 22.x version branches, with corresponding patched releases: 26.12.1, 24.22.1, and 22.23.4. The advisory details 10 total vulnerabilities, categorized as 4 critical-severity, 3 medium-severity, and 3 low-severity, with varying impact scopes across the three version lines. The critical CVE-2026-111497 is an out-of-bounds write flaw in the Brotli decoder that could enable remote code execution (RCE), affecting all three branches. Other critical issues include improper null character handling in DNS resolution and a TLS certificate hostname validation bypass. The update also resolves problems with persistent connection response processing, random number cache duplication, and permission models, while updating dependencies including c-ares, OpenSSL, and Undici. The official note warns that end-of-life (EOL) versions may still be vulnerable, advising users to use the latest supported releases. Separately, prior reports noted PHP has fixed two critical unauthenticated RCE vulnerabilities, with patches available for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35; PHP users are urged to upgrade immediately.

Renowned trader Bonk Guy posted that the current crypto market is showing characteristics of a "privacy cycle". He noted that since yesterday, Bitcoin has risen approximately 3%, ZEC is up 16%, adding over $3 billion in market capitalization. MASK currently has a market cap of roughly $26 million, with its protocol trading volume and fees hitting consecutive all-time highs, he added. Citing data from DefiLlama, he stated that MASK ranks first among privacy protocols by revenue, outearning the next 10 privacy protocols combined. By comparison, ZEC’s market cap gain over the past 24 hours is roughly 115 times MASK’s entire market cap. Bonk Guy also said that MASK’s upcoming deployment on Solana is set to launch in the coming days, which he expects will further drive growth in usage, trading volume, and fees. He went on to call MASK the most undervalued privacy protocol in the crypto market.

According to reports from Reuters and Axios, the Kremlin stated that Russian President Vladimir Putin told U.S. envoy Steve Witkoff on Wednesday he "agrees in principle" to resume trilateral peace talks between Russia, Ukraine and the U.S. around November 10 to end the Russia-Ukraine conflict, with the venue potentially in Abu Dhabi. Witkoff held a three-hour meeting with Putin in St. Petersburg the same day, presenting the latest plan to end the Russia-Ukraine conflict. Trump envoy Jared Kushner joined the session via video. Witkoff informed Putin that progress had been made in the Oslo talks, and expressed hope that both sides would consider restarting the Russia-U.S.-Ukraine trilateral negotiations and allow technical experts to participate in discussions on specific issues. He also submitted multiple documents on the peaceful resolution of the Russia-Ukraine conflict to Putin. Separately, Putin raised with Witkoff the possibility of Russia acting as a mediator between the U.S. and Iran. Putin noted that Russia has decades of special trust relations with Iran and is willing to contribute to resolving the current crisis.