'Black October': four cyber incidents in 48 hours hit crypto infrastructure
- —PHP2Shell: two critical PHP flaws affecting roughly 70% of websites, patched on October 21
- —eMudhra revoked about 30,000 client certificates after Chrome, Apple and Microsoft blocked them
- —Railway halted its platform after attackers accessed customer keys and database passwords
- —Node.js shipped fixes for versions 22, 24 and 26 against remote code execution
Why it matters: Crypto exchanges and custodians rely on PHP, Node.js and TLS certificates, leaving unpatched servers a viable entry point for attackers.
Source: BeInCrypto RU