Posts

Two PHP remote code execution zero-days, CVE-2026-109618 and CVE-2026-109619, were reported as leaking ahead of coordinated disclosure, and the PHP security team has scheduled a critical patch for October 21. Servers running vulnerable builds without a filter chain in place are exposed before patching. Organisations running PHP in production should treat this as time-critical rather than routine maintenance.

Utah’s attorney general has sued Kalshi, the prediction-market platform, arguing it operates an illegal gambling operation and describing the firm as the manager of a back-alley gambling den. Utah also declared the activity a public nuisance. The case adds another state-level challenge to event contracts, building on pressure event-contract platforms already face from regulators over whether such products count as gambling or regulated derivatives.

Eight certificates issued by eMudhra, a widely used certificate authority, were found to rely on compromised keys, prompting emergency updates across browsers, operating systems and software platforms. Cloudflare published an incident note describing the affected certificates and required action, and major technology vendors began blocking the implicated certificate chains. The event is significant because certificate authorities sit at the root of the trust system, so a key compromise undermines the validity of encrypted connections far beyond any single affected site.

Elon Musk said on October 20 that Tesla and SpaceX have each formed special committees to weigh a potential merger, with independent directors evaluating the combination. Musk described the outcome as not a certainty. The discussion follows SpaceX’s first-ever quarterly profit, with revenue up 161 percent as its AI-related business scaled and capital spending coming in below expectations. Press reports put the potential combined value in the range of 3.5 trillion dollars. Tesla shares slid while SpaceX stock surged after the disclosure.

Super Micro Computer disclosed preliminary results showing it sold roughly 4 billion dollars more than expected last quarter, and guided first-quarter fiscal 2027 net sales to 18.5 to 19.5 billion dollars against a consensus near 15 billion. Adjusted gross margin is expected at 12 to 12.5 percent, above the prior 14.5 to 15.5 billion revenue outlook. Shares jumped about 12 percent, with Dell and Hewlett Packard Enterprise following the rally. The update underlines how sharply AI platform demand is running ahead of supply-side planning.

United Airlines cut its full-year 2026 profit outlook, citing higher fuel prices, while reporting a fourth-quarter revenue forecast above estimates at about 18.48 billion dollars. The disconnect between a strong revenue guide and a reduced profit outlook is the central story: fuel costs are absorbing the pricing power airlines have built since 2022. Analysts note travellers continue to book despite higher fares, suggesting demand elasticity remains limited, which is the airlines’ main defence but also their main vulnerability.

General Motors reported third-quarter net income more than doubling year on year, driven primarily by truck operations and software services even as overall sales edged lower. The company announced a $20 billion share buyback while narrowing full-year guidance and raising its adjusted automotive free-cash-flow outlook. GM shares fell roughly 6% in their worst session in more than a year, with Ford also lower.

Analysis published by Novo Nordisk shows its next-generation obesity medicine CagriSema helped women lose about 25% of body weight on average in late-stage research, ahead of previously reported primary-endpoint results. The compound combines a glucagon-like peptide with a long-acting component and forms a key part of the company’s next phase in obesity treatment development.

Research jointly produced by Coinbase and The Block shows rapid growth in stablecoin transfer volumes, with roughly 73% of transfers occurring outside traditional banking hours. On an adjusted basis, quarterly transfer volume is projected to reach $1.5 trillion by end-2027. Notably, growth is concentrated in transaction frequency rather than market capitalisation, which stayed broadly flat over the past year.

Salesforce announced on October 20 a definitive agreement to acquire customer-engagement and marketing-automation platform Braze for $47.50 per share in an all-cash transaction valued at roughly $5.7 billion. Braze shares rose about 51% on the news while Salesforce slipped roughly 3%, reflecting investor views that the premium is justified but integration and cash outflow are real costs.