Alex• retweeted
🛡️ Attackers Started Scanning in the Wild for Linux Kernel RCE Flaw, Ubuntu Releases Fixes
Details: cybersecuritynews.com/linux-…
Ubuntu has put early kernel fixes for CVE-2026-98432 in its -proposed pocket for 22.04 LTS and newer releases. The bug is a serious Linux kernel flaw that can let a remote user run commands as root without a login or any user action.
The patches are still in testing, so many servers stay open for now. Researcher Marcus Hutchins says normal scanners do not use MPTCP by default, so he strongly suspects this activity targets CVE-2026-98432.
His scan on October 30 found about 2,102,043 servers reachable over MPTCP on port 443. There is no public remote code execution exploit yet. Several denial-of-service proofs-of-concept do exist, and they give attackers a starting point.
#CybersecurityNews
Alex• retweeted
The 24-hour reporting clock is already running. Cyber Resilience Act (CRA) reporting requirements are in effect, and device makers need a plan.
Join us on November 5 at 4 PM CET as we walk you through what’s required now and the steps to take before 2027.
Register: bit.ly/4yY033G
#Canonical #CRA #Compliance
Alex• retweeted
Adding a new payment gateway or payment method through an in-house integration can take months.
Expanding into another country shouldn’t mean starting your payment integration from scratch.
Reuse your Finance Computer payment setup as you add supported markets or brands, adapting it to local requirements across the EEA.
Domino’s uses the same embedded payment module across its website and app in Cyprus and Romania: one module, two countries, a familiar way to pay.
Embed financial services in your platform.
Alex• retweeted
Fixes available in -proposed pocket for CVE-2026-98432. Read the blog for more details: ubuntu.com/blog/fixes-availa…
Fixes available in -proposed pocket for CVE-2026-98432. Read the blog for more details: ubuntu.com/blog/fixes-availa…
Alex• retweeted
‼️ Apps built with the AI app-maker Lovable left passport numbers, payment information and 200,000 chat messages open to anyone, no login needed.
German security firm Crissy Field scanned 159,041 Lovable projects and found databases with email addresses readable on 7,403 sites.
Lovable promises no coding skills are needed. Its terms make customers responsible for their apps and data.
Lovable told German business daily Handelsblatt the problem is industry-wide.
Alex• retweeted
UPDATE: The European refrigeration cyberattack has now reached Italy and Romania, bringing the total to at least 10 countries affected across Europe.
In Italy, several Coop stores in Sicily were hit, including at least three in Catania and one in Palermo. In Romania, at least six stores have reportedly been affected.
Some affected businesses have yet to publicly disclose the incidents, meaning the actual number of countries and locations impacted could be even higher.
The full scale of this cyberattack remains unknown.
Countries affected so far: 🇸🇪 Sweden 🇧🇪 Belgium 🇱🇺 Luxembourg 🇪🇪 Estonia 🇮🇪 Ireland 🇳🇱 Netherlands 🇫🇮 Finland 🇩🇰 Denmark 🇮🇹 Italy 🇷🇴 Romania
UPDATE: Since our last update, two more countries have reported disruptions to supermarket refrigeration systems, bringing the total to seven countries affected across Europe.
🇸🇪 Sweden and 🇧🇪 Belgium appear to be among the hardest-hit countries, with multiple supermarket chains and stores experiencing significant disruptions and food losses.
🇱🇺 Luxembourg has also reported incidents affecting Delhaize stores.
🇮🇪 Ireland has seen refrigeration disruptions at 13 SuperValu stores, forcing chilled and frozen products to be removed.
🇳🇱 The Netherlands has reported incidents at at least 17 businesses, primarily smaller retailers, butcher shops and food-storage facilities.
🇪🇪 Estonia reported a cyberattack targeting refrigeration controls, with freezer temperatures reportedly reaching +50°C. The incident was detected and addressed within approximately 10 minutes, preventing major damage.
🇫🇮 Finland has reported only minor, limited-scale temperature irregularities in some K Group stores. The situation there appears significantly less severe than in other affected countries.
Alex• retweeted
Probabil X va ingropa si aceasta postare, dar vreau sa va impartasesc ca maine seara voi povesti despre cum este sa te trezesti in iad si sa inveti mergi prin el.✌🏻
Evenimentul Pyra Networking are loc maine la ora 19:30 , locatie Supermind // Asmita Gardens, Bucuresti.
Ne vedem acolo 🙌🏻
Mai multe detalii 👇🏻
Alex• retweeted
Ubuntu is getting roasted over a kernel bug it still hasn't patched.
CVE-2026-98432 is a use-after-free in the Linux kernel's IPv4 TCP handshake code. It's been there since 2016, it can be triggered remotely, and it's rated CVSS 9.8. Debian shipped a fix on October 16. Arch, Alpine and Slackware have fixes too.
Ubuntu's security tracker still lists every supported release, 24.04 and 26.04 LTS included, as "Vulnerable", with fixes marked "work in progress". Ubuntu also rates it "High" rather than Critical, and Critical is what normally triggers an out-of-cycle update.
A blog post called "WTF Ubuntu?" by chalmovsky hit the top of Hacker News today. It says: "Ubuntu hasn't shipped the patch nine days after it was rated 9.8 and six days after a working root exploit." The author also took their Ubuntu servers offline.
HN commenters point out that fixed kernels are already sitting in Ubuntu's -proposed repositories. Others are swapping migration notes for Debian, AlmaLinux and Rocky. So far there's no public statement from Canonical.
Alex• retweeted
Will @xPortalApp NEO launch in November? Or we get another delay?
Predict this
predix.projectx.mx/bet/erd1q…
Claim devnet EGLD here -> r3d4.fr/faucet2.
Final tests on devnet for the first Prediction Market fully on chain.
Alex• retweeted
Predict and win (devnet) $EGLD.
For now. Final tests ongoing.
predix.projectx.mx/bet/erd1q…
Will @xPortalApp NEO launch in November? Or we get another delay?
Predict this
predix.projectx.mx/bet/erd1q…
Claim devnet EGLD here -> r3d4.fr/faucet2.
Final tests on devnet for the first Prediction Market fully on chain.
Attitudes like this are why Web3 will never progress
Choosing to blame users while ignoring glaring security weaknesses
If we don’t do absolutely everything in our power to make the UI/UX flawless and simple
Then there is zero chance we will ever see mass adoption
Ethereum is failing massively at that mission and is arguably one of the most flawed chains for users
Alex• retweeted
🛡️@MultiversX introduces an account upgrade mechanism that allows for the replacement of #Ed25519 signatures with post #quantum (#NIST ready) schemes while retaining the same address, shard, and ownership based on draft specifications and #Rust prototypes. $EGLD 💎
MULTIVERSX UNLOCKS POST-QUANTUM SECURITY FOUNDATIONS
Security must evolve before the threats become reality.
We’ve put together an interactive experience exploring the significance of these milestones, the critical security advances underway, and what they mean for the future of MultiversX.
multiversx.com/quantum-proof
Alex• retweeted
MULTIVERSX UNLOCKS POST-QUANTUM SECURITY FOUNDATIONS
Security must evolve before the threats become reality.
We’ve put together an interactive experience exploring the significance of these milestones, the critical security advances underway, and what they mean for the future of MultiversX.
multiversx.com/quantum-proof
Alex• retweeted
MULTIVERSX POST-QUANTUM SECURITY FOUNDATIONS ARE HERE
We’ve put together an interactive experience exploring the significance of these milestones, the critical security advances underway, and what they mean for the future of MultiversX.
MULTIVERSX UNLOCKS POST-QUANTUM SECURITY FOUNDATIONS
Security must evolve before the threats become reality.
We’ve put together an interactive experience exploring the significance of these milestones, the critical security advances underway, and what they mean for the future of MultiversX.
multiversx.com/quantum-proof
Alex• retweeted
JUST IN: 🇧🇷 Brazil's largest crypto exchange, Mercado Bitcoin, suspends deposits and withdrawals after reportedly being hacked for over $40 million.
Alex• retweeted
We asked Mistral Large 4 to show what happens when you break a molecule. ⚛️
With a short prompt, it wrote a quantum chemistry SCF solver from scratch, validated its output, and built a 3D view around it.
Le Chonk also understand chemistry enough to independently choose how to break the molecule and what orbitals to show, without further input. 🧵
Alex• retweeted
what is a "built-in function" on MultiversX, and why doesn't a token transfer run as a smart contract?
quick one, in plain words.
on many chains a token is a contract. every balance lives in that contract's storage, and sending the token means calling the contract so it updates its own map.
on a sharded chain that design hurts. a popular token contract sits in one shard, so every transfer of it, from every user in every shard, has to pass through that one place.
so MultiversX does it the other way. ESDT tokens are native. your balance of a token lives in your own account, next to your EGLD. [ROBERT: confirm wording]
moving it is a built-in function: ESDTTransfer, ESDTNFTTransfer, MultiESDTNFTTransfer. they are written in Go, inside the protocol. no WASM instance is started for a plain transfer.
what we get from that:
- a transfer touches only sender and receiver. the sender's shard debits, the receiver's shard credits. no central contract.
- predictable gas from the gas schedule, not whatever the token author wrote.
- every token behaves the same. no hidden fee-on-transfer, no surprise hooks in a token contract.
the same family covers account actions too: ChangeOwnerAddress, ClaimDeveloperRewards, SetGuardian, SaveKeyValue.
the trade-off is real: a token can't run arbitrary code when it moves. if you want that logic, it lives in your own contract and tokens go through it.
for me it is the right default. the common path stays native and simple, the custom path is opt-in.
you can see it in any transaction's data field: ESDTTransfer@<token>@<amount>.
Alex• retweeted
UPDATE: Since our last update, two more countries have reported disruptions to supermarket refrigeration systems, bringing the total to seven countries affected across Europe.
🇸🇪 Sweden and 🇧🇪 Belgium appear to be among the hardest-hit countries, with multiple supermarket chains and stores experiencing significant disruptions and food losses.
🇱🇺 Luxembourg has also reported incidents affecting Delhaize stores.
🇮🇪 Ireland has seen refrigeration disruptions at 13 SuperValu stores, forcing chilled and frozen products to be removed.
🇳🇱 The Netherlands has reported incidents at at least 17 businesses, primarily smaller retailers, butcher shops and food-storage facilities.
🇪🇪 Estonia reported a cyberattack targeting refrigeration controls, with freezer temperatures reportedly reaching +50°C. The incident was detected and addressed within approximately 10 minutes, preventing major damage.
🇫🇮 Finland has reported only minor, limited-scale temperature irregularities in some K Group stores. The situation there appears significantly less severe than in other affected countries.
The situation this morning in Europe:
A cyberattack is disrupting supermarket refrigeration systems across several European countries, including Sweden, Belgium, Luxembourg, Estonia and Ireland.
• What is happening: A vulnerability in specific refrigeration control software is allowing attackers to remotely manipulate freezer systems, causing temperatures to rise as high as +50°C.
• Supermarkets are facing massive food losses, with fresh, chilled and frozen products being discarded due to food safety risks. Some stores have experienced temporary closures and delayed openings.
The issue involves connected refrigeration systems whose software and security vulnerabilities are being exploited, allowing attackers to interfere with temperature controls remotely.
Retailers are responding, working with cybersecurity specialists and taking affected products off sale to protect consumers.






























