jacko06v

What is going on in cybersecurity right now? In a single day: • PHP: 2 CVEs • Node.js: 10 CVEs • NGINX: 5 CVEs • Go: 1 CVE • GitLab: 12 CVEs • eMudhra: CA certificate compromise • Railway: Security breach 30 CVEs, plus two major security incidents. PHP is probably the biggest story. Two critical vulnerabilities (CVSS 9.2) potentially allowing unauthenticated RCE. One underlying issue was identified back in 2024, but its full exploitability became clear only recently. Researchers used AI-assisted security tools, including GPT-5.6 Sol. Official: thephp.foundation/blog/2026/… And PHP wasn't alone. Node.js patched 10 CVEs. NGINX disclosed 5 CVEs, including critical vulnerabilities potentially enabling RCE. GitLab patched 12 vulnerabilities, including a CVSS 10.0 unauthenticated RCE. These are foundational technologies used by millions of applications. NGINX: nginx.org/2026.html GitLab: docs.gitlab.com/releases/pat… Then there's eMudhra. 8 intermediate CA private keys were compromised because they were generated with insufficient randomness. That could allow attackers to forge trusted HTTPS certificates. Google and Mozilla had to intervene. Go and Node.js also shipped certificate trust fixes related to this incident. Google: blog.google/security/protect… Meanwhile, Railway disclosed an actual security breach. An unauthorized party may have accessed customer environment variables, including decrypted secrets. Railway believes this could be part of a wider campaign targeting platform companies to reach AI inference providers. Official: blog.railway.com/p/security-… But here's what I find most interesting. We're entering a new era of AI-driven vulnerability discovery. AI can analyze massive codebases, find obscure bugs and help researchers turn theoretical weaknesses into demonstrable exploits. Problems that survived years of human review may now be uncovered much faster. And this creates an interesting paradox. AI is making defenders more capable than ever. But increasingly powerful AI tools may also lower the cost of finding exploitable vulnerabilities for attackers. Discovery is accelerating. Patching, testing and deploying fixes still take human time and coordination. We may be approaching a point where finding vulnerabilities becomes significantly faster than fixing them. The next cybersecurity challenge won't just be discovering bugs. It'll be keeping up with the speed of discovery. openai.com/index/coordinated…

After months and months of building, pushing, fixing, and working toward this moment, we can finally see the finish line. And at the same time, the starting line. @Arc mainnet goes live tomorrow. And @synthra_finance goes live with it. Feels unreal to finally say that. 💜

As I warned earlier… Nearly 47 ETH ($118,464.92) appear to have been moved out of the long.supply vault to a team-controlled wallet, then bridged to Ethereum. robinscan.io/tx/0x865d75c010… If you bridged ETH to Arc through their bridge, you now hold a token with no liquidity, and you can't bridge it back

🚨 POTENTIAL RUG-PULL RISK ON @arc: $300K+ UNDER TEAM CONTROL ⚠️STAY SAFU⚠️ If you’re bridging NVDA from Robinhood Chain to @Arc through long.supply, understand this risk Our latest checks found: • Over $300,000 in assets held on the Robinhood Chain side. • Approximately $400 in liquidity in the Arc NVDA/USDC pool we examined. The vault code we reviewed allows the authorized operator to release assets to a chosen address. The owner can replace that operator, creating a path to move the vault’s entire balance to addresses they control. “But I already have my tokens on Arc.” Those tokens represent claims on the underlying assets held in custody. If the backing is removed, your wallet balance can remain unchanged while redemption becomes impossible and market value collapses. Selling on Arc is not a guaranteed escape: the small pool we checked offers very limited exit liquidity. Its liquidity is separate from the bridge’s reserves. We are highlighting a capability and a risk, not claiming that theft has occurred. long.supply discloses its custodial model in the footer. Users should see this clearly BEFORE depositing. Know who controls the backing behind your tokens. Stay Safu

Arc mainnet is almost here. September 16. Not just launchpads. DEFI - @synthra_finance = spot, perps, cross-chain and launchpad with creator and buy-back fees - @Uniswap = swaps + liquidity pools - @aeroxyz = liquidity + stablecoin markets - @aave = supply assets and borrow - @Morpho = lending markets + vaults - @CurveFinance = stablecoin swaps - @0xfluid = lending + DEX liquidity TRADING - @synthra_finance = spot, perps, cross-chain and launchpad with creator and buy-back feestrading in one app - @hibachi_xyz = stablecoin-native FX markets - @edgeX_exchange = 24/7 FX perps, targeting day one - @TowerExchange = native stablecoin DEX aggregation CROSS-CHAIN - @synthra_finance = spot, perps, cross-chain and launchpad with creator and buy-back fees - @lifiprotocol = cross-chain swap routing, ready for day one - @AcrossProtocol = intent-based bridging - @Xylonet_ = swaps, bridge and social stablecoin payments LAUNCHPADS - @synthra_finance = spot, perps, cross-chain and launchpad with creator and buy-back fees - @TrustSwap = token creation, launches, locks and vesting - @arcpad_meme = V3 launches with locked LPs, no bonding curve - @Archemistdotfun = token launches + creator-focused fees - @TollyLabs = launchpad + trading terminal - @Flutchdotfun = token and NFT launches - @UBIdotFUN = Uniswap v4 launches + holder rewards - @actfunxyz = launchpad + marketplace - @circlewarp = bonding-curve launches + DEX graduation NFTS + WALLETS - @Orixaxyz = NFT marketplace + curated launches - @MetaMask = self-custody access to Arc - @Ledger = hardware-wallet access A mix of announced integrations and native builders, not a guarantee that every app is live on September 16. Launch dates vary. September 16 should be interesting. Who am I missing?

After months of hard work, the time has finally come. September 16 · 18:00 UTC

BlackRock, Visa, Mastercard, DTCC, ICE, Standard Chartered and other global financial leaders are joining Arc as founding validators. Arc Mainnet goes live on September 16. The next chapter of institutional onchain finance is about to begin, and Synthra will be there from day one.

List me all the @RobinhoodCrypto launchpad! 👀

The approval of Chat Control marks a worrying step toward normalizing mass surveillance in Europe. Protecting children and fighting crime are essential goals, but they should not come at the cost of weakening the privacy and fundamental rights of hundreds of millions of law-abiding citizens Once governments establish the principle that everyone's private communications can be subject to automated scanning, the debate is no longer just about today's use case. It becomes about the precedent. History has repeatedly shown that surveillance powers introduced for one purpose often expand over time Privacy is not something only criminals need. It is a fundamental right that protects journalists, activists, lawyers, businesses, political dissidents, and ordinary people who simply deserve to communicate without being constantly monitored. End-to-end encryption has become one of the most important security technologies of the digital age, safeguarding not only personal conversations but also banking, healthcare, and critical infrastructure Europe has long positioned itself as a global defender of privacy and digital rights. Decisions like this risk undermining that reputation and sending the opposite message: that security should increasingly outweigh individual freedoms, even when the long-term consequences are uncertain Security and privacy should not be treated as mutually exclusive. We can, and should, fight serious crime without creating mechanisms that weaken everyone's digital rights. Once privacy is eroded, getting it back is far more difficult than preserving it in the first place

Maybe the problem is, humans make it hard when it's really easy.

So true. I don't think it's a good idea to invest in a token that's already up 56,000% in 24 hours. (I'm probably wrong though. Every time I say this, it doubles the next day.) cash-cat:native

not funny funny

It's very hard to lose if you never quit. Don't quit. Especially when it gets hard.

Hi my name is jacko06v and this is where I live 🇮🇹 (not rome, just in italy lol)

Too late to buy solana:9cRCn9rGT8V2imeM2BaKs13yhMEais3ruM3rPvTGpump ?👀