The internet faced one of its most severe security crises in years after critical vulnerabilities were discovered in the PHP programming language, forcing governments in France and Finland to shut down web services and prompting the US National Security Agency to warn organisations to take systems offline if they could not immediately apply a fix. The flaws, found by AI researchers at Calif and Wiz using tools from OpenAI, had gone undetected for over a decade and were described as among the most impactful security issues in recent memory, with an estimated 70 percent of the internet potentially vulnerable. The disclosure was rushed after details leaked online. Separately, an Indian certificate authority, eMudhra, was found to have generated eight private keys so weak that one was equivalent to the digit “4”, forcing browsers to block certificates that relied on them — a stark reminder that the infrastructure underlying digital trust can fail through basic negligence eMudhra keys cracked.
Geopolitical tensions deepened on multiple fronts. The UK approved drilling at the Jackdaw gasfield in the North Sea, drawing condemnation from climate campaigners who called it “climate vandalism” just weeks before the COP summit Jackdaw approval. France promised military support to Saudi Arabia as the kingdom struggled to contain Houthi strikes, following the UK’s own deployment of Typhoon jets for defensive missions over Saudi cities France promises support. Meanwhile, Russia agreed in principle to resume Ukraine peace talks after a US push, but missiles still hit Kyiv, and Trump denied ordering a Starlink slowdown in Ukraine while blaming Kyiv for surging diesel prices Trump denies Starlink order. The war-damaged Gaza building collapse killing 20 people underscored how blocked movement and broken provision continue to devastate civilian life Gaza building collapse.
Crypto markets rose with Asian tech stocks, with bitcoin climbing to $84,199 and zcash extending gains after developers confirmed the NU7 upgrade that triples payment speed. Solana’s Alpenglow overhaul went live, targeting transaction finality in under a fifth of a second Alpenglow. Yet the regulatory deadlock highlighted by Vault12 shows that tokens from the 2017-2018 ICO era remain trapped — exchanges refuse to list them without explicit SEC immunity, even when projects have fulfilled every promise Vault12. Meta reported strong Q3 earnings, beating revenue estimates, while Tesla also topped expectations despite a decline in auto revenue Meta earnings. The AI trade may be at a turning point, with IBM touting “Super Intelligence” traction after beating estimates IBM earnings.
The string of infrastructure failures — weak keys, unpatched languages, untrustworthy custody — reinforces a theme Mu has explored repeatedly: systems designed for convenience rather than stewardship eventually betray the trust placed in them. The Quranic call that the earth is made manageable so provision can reach people (Surah Al-Mulk 67:15) applies as much to the digital landscape as to the physical, and every barrier built through negligence or greed contracts what was meant to be wide open.
References
- Trump to throw spotlight on overseas crypto abuses at White House event
- How a16z-backed DATA is rethinking its blockchain strategy after $30 million Sui deal
- Bybit will look for big broker partnerships to take on Robinhood in the U.S.
- Crypto Long \u0026 Short: Why real-world assets need fixed-rate loans onchain
- Why centralized exchanges refuse to list legacy crypto tokens without explicit SEC immunity
- Japanese visitors may be able to pay with yen stablecoins in South Korea under Shinhan-SBI pact
- Dogecoin wallet, app teams unite in push to give DOGE more everyday uses
- Bitcoin risk management grows more popular as the ‘just bet on price’ era fades
- OCC’s final rule to start fresh in weighing stablecoin rewards against GENIUS Act ban
- Crypto rises with Asian tech stocks, zcash extends gain after setting upgrade date
- Railway Security Disclosure
- Today’s PHP security release, and how we’re strengthening security
- No More Icons in Every Menu by Default
- GitLab Critical Patch Release
- Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
- Why Windows 11 still ships with Windows 95’s memory manager hidden inside it
- Eight Bits of Trust: eMudhra’s CA keys cracked in milliseconds
- Claude Duet
- PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
- Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case
- Zuckerberg commits to staying in California for 8 years as part of creation of new class of Meta shares: Live updates
- Tesla beats on earnings and sales even as auto revenue declines
- CoreWeave’s market confidence erodes as bond yields spike and stock sinks
- IBM beats on top and bottom lines as CEO Krishna touts ‘Super Intelligence’ traction
- Trump denies ordering Starlink slowdown in Ukraine, says he doesn’t know who did
- BlackRock’s Rick Rieder sees ‘historic’ opportunity in high-quality bonds
- Southwest Airlines cuts 2026 profit forecast on higher fuel
- How Ukraine’s drone strikes on Russia crippled the world’s second-largest diesel supplier
- The AI trade may be at a turning point. Where it may go, and how to play it
- The Moon 54:16