Pinned Tweet
What does it take to build what’s next?
People with different ideas.
Different skills.
Different perspectives.
One shared belief that something better can be built.
BUILDERS OF THE XPR NETWORK™ is where media, music, Web3 education, technology, community and creation come together.
Our nine archetypes represent the many roles behind an ecosystem — but BUILDERS is bigger than nine characters.
We’re building a living media and community platform.
🎵 Original music
🎬 Films & original media
📚 Web3 education
📰 News, conversations & ideas
🛠️ Builder and project features
🌐 XPR Network ecosystem discovery
🪙 BLDR Token & digital collectibles
🤝 Community
You don’t have to be a developer to build.
You don’t have to be a founder to have an idea.
You just have to bring something to the table.
So here’s the question we’ll keep asking:
What are YOU building?
BUILDERS OF THE XPR NETWORK™
Together We Build What’s Next.™
🚀 YOUR NFT REWARDS ARE READY TO CLAIM! 🎁
The wait is over, BUILDERS! Your NFT rewards are now available through NFT Claim Hub, powered by XPR Network.
This is what building an ecosystem is all about — connecting our community with real opportunities, innovative technology, and the rewards that come from participating.
💎 Rewards are LIVE
🔗 Claim through NFT Claim Hub
📅 Deadline: November 10, 2026
Don't leave your rewards unclaimed! Visit the platform, connect your wallet, and check your available rewards before the claim window closes.
🌐 nftclaimhub.io/
BUILDERS OF THE XPR NETWORK™
People. Ideas. Creation. A Stronger Tomorrow.
Proudly presented by Trenia Today International.
#BuildersOfXPR #BLDR #XPRNetwork #NFTClaimHub #NFTRewards #Web3 #Blockchain #NFTCommunity
🤖 Made with AI
🚀 GET BLDR TODAY — DISCOVER THE BUILDERS ECOSYSTEM!
BUY • TRADE • STAKE • LIQUIDITY • FARM
BUILDERS OF THE XPR NETWORK™ is more than a collection of digital art. We're developing an ecosystem connecting NFTs, BLDR token rewards, decentralized trading, staking, liquidity pools, and farming opportunities.
If you've been wondering where to get BLDR and how to participate, here's your guide.
🪙 WHAT IS BLDR?
BLDR is the BUILDERS ecosystem token on XPR Network.
It is used for eligible NFT holder rewards and can also be traded, staked, or paired with other assets in supported liquidity pools.
You do not need to own a BUILDERS NFT simply to acquire or trade BLDR.
💰 1. BUY BLDR
Find the actual BLDR token pages here:
🔹 BLDR on Alcor Exchange:
alcor.exchange/v/xpr/analyti…
🔹 BLDR on Vibrr:
vibrr.ai/dex/token/140
Connect a compatible XPR Network wallet, review the available trading pairs, verify the token details and swap quote, and follow the platform's trading process.
📈 2. TRADE BLDR
BLDR can be exchanged through supported markets.
Explore available trading pairs, monitor activity, and review liquidity and price impact before completing a transaction.
🔒 3. STAKE BLDR
BUILDERS has two BLDR token staking pools on BlastPad.io.
💎 90-DAY BLDR STAKING
blastpad.io/staking-pool?poo…
💎 180-DAY BLDR STAKING
blastpad.io/staking-pool?poo…
These are two separate staking pools with different lock-up periods.
Review the current reward information, deposit requirements, and withdrawal conditions on each pool before participating.
💧 4. LIQUIDITY
Liquidity pools are essential to decentralized exchanges because they support swaps between token pairs.
BUILDERS has three liquidity pairs across Alcor and Vibrr.
🔹 XPR / BLDR — ALCOR
alcor.exchange/v/xpr/analyti…
🔹 VIBRR / BLDR — VIBRR
vibrr.ai/dex/pool/59
🔹 EASY / BLDR — ALCOR
alcor.exchange/v/xpr/analyti…
These links take you directly to the individual liquidity pool pages.
🌾 5. FARM
Interested in liquidity farming?
Here's the important distinction:
You don't simply purchase BLDR and automatically begin farming.
First, you need to establish an eligible liquidity position by supplying the required paired assets to the corresponding pool.
Then you can review the associated farm and its participation requirements.
Our three BUILDERS pairs are:
🌾 XPR / BLDR — Alcor
🌾 VIBRR / BLDR — Vibrr
🌾 EASY / BLDR — Alcor
Start with the direct liquidity pool links above.
Liquidity participation carries risks, including impermanent loss, and farming rewards can change.
🎨 HOW DOES THIS CONNECT TO OUR NFTs?
BUILDERS OF THE XPR NETWORK™ features three NFT collections:
🎨 Genesis Art
🎵 Original Songs
🎬 Cinematic Films
Beginning November 1, 2026, eligible NFT holders can check available BLDR rewards through NFT Claim Hub.
nftclaimhub.io/
NFT holder rewards are separate from BLDR token staking and liquidity farming.
🚀 DISCOVER BLDR.
BUY. TRADE. STAKE. LIQUIDITY. FARM.
Explore the token pages, staking pools, and liquidity pools. Understand how each works, and choose how you want to participate.
BUILDERS OF THE XPR NETWORK™
People. Ideas. Creation. A Stronger Tomorrow.
#BUILDERS #BLDR #XPRNetwork #Vibrr #Alcor #BlastPad #DeFi #LiquidityPools #Web3
Builders of XPR retweeted
Introducing Metal Intelligence by Metallicus.
On-chain intelligence, PulseVM transaction controls, and AI agent governance for banks and credit unions.
Understand wallet activity. Monitor smart contract risk. Enforce institutional policies.
metallicus.com/institutions/…
Builders of XPR retweeted
🚨BREAKING: FBI officially confirms North Korea was behind the $6.3 BILLION attack on Binance.
The FBI says North Korea was responsible for stealing more than $6 BILLION in crypto from Binance on or around October 29.
It blames the same hacking group it calls TraderTraitor, which it also tied to the $1.5 BILLION Bybit hack.
The FBI is urging exchanges and DeFi services to block the hackers' addresses as they try to launder the funds.
Binance says its users won't pay for the theft, and it has already covered 90% of the losses ahead of reopening withdrawals on Sunday.
Builders of XPR retweeted
Metallicus is BADASS. 🤘
The team works their ASS off.
The community is FIRST CLASS.
And me? I’m the cheeky Aussie adding a little SASS. 🇦🇺😂
Some people watch the charts.
I watch the builders.
Same chair. Different reason for sitting on my ASS.
— Bruce Stewart
Builders of XPR retweeted
🎨💜 MEET THE CREATOR — WHERE IMAGINATION BECOMES ART.
Of all the things that excite me about technology, one of my greatest passions has always been creativity.
The ability to take an idea that exists only in your imagination and turn it into something real.
A design. A film. A song. A story. A brand. An entire digital world.
That's exactly what THE CREATOR represents in our BUILDERS OF THE XPR NETWORK™ Genesis Art collection.
And today, I want to give her a proper spotlight.
✨ WHO IS THE CREATOR?
She's the artist who sees possibilities where others see a blank canvas.
The storyteller who transforms an idea into an experience.
The filmmaker who brings imagination to the screen.
The designer who creates something that didn't exist yesterday.
The innovator who uses technology to push creative boundaries.
Her message:
CREATE. INSPIRE. ELEVATE.
And I think that message speaks to every creative entrepreneur, digital artist, filmmaker, and visionary who's ever taken a chance on an idea.
💎 THE CREATOR — GENESIS ART
She's one of nine unique archetypes in the BUILDERS Genesis Art collection.
Her NFT details:
🎨 Archetype: Creator
💜 Rarity: Rare
🔢 Edition Supply: 81
🪙 Collection Price: 10,000 XPR
🌐 Blockchain: XPR Network
🛍️ Marketplace: Vibrr
You can view her artwork and explore the NFT directly here:
vibrr.ai/vibrr-market/templa…
The complete Genesis Art collection features nine archetypes representing the different people who contribute to the Web3 ecosystem.
From Developers and Validators to Teachers, Traders, Dreamers, Collectors, Explorers, Builders, and Creators, each has a story to tell.
💎 NOW LET'S TALK ABOUT NFT REWARDS.
Tomorrow, November 1, 2026, BUILDERS begins its NFT holder rewards program.
Eligible holders of BUILDERS NFTs can check and claim available BLDR rewards through NFT Claim Hub.
BLDR is the ecosystem token supporting our NFT rewards and other participation opportunities.
You can explore BLDR independently through supported XPR Network exchanges, including Alcor and Vibrr DEX.
🪙 Alcor Exchange:
alcor.exchange/
🪙 Vibrr:
vibrr.ai/
💎 NFT Claim Hub:
nftclaimhub.io/
And for Genesis Art holders, there's also a separate NFT staking program on Vibrr:
vibrr.ai/nft-staking/3
NFT holder rewards, NFT staking, and BLDR token staking are separate programs with their own participation requirements.
💜 WHY I LOVE THIS COLLECTION
As someone who works in creative development, branding, marketing, and AI filmmaking, I appreciate what it takes to bring an idea to life.
Creativity isn't just about making something beautiful.
It's about communication, imagination, problem-solving, storytelling, and having the courage to create something original.
That's what this archetype represents to me.
And that's why I wanted to introduce her properly.
Whether you're an artist, filmmaker, designer, entrepreneur, or someone who simply appreciates original digital art, I invite you to discover THE CREATOR.
🎨 CREATE.
✨ INSPIRE.
💜 ELEVATE.
Discover her NFT:
vibrr.ai/vibrr-market/templa…
#TreniaToday #BUILDERS #BLDR #XPRNetwork #GenesisArt #TheCreator #DigitalArt #Web3 #NFTArt #CreativeTechnology
Builders of XPR retweeted
If you don’t think @FrankMazza3 and @MarshallHayner have been sitting in rooms with Fortune 500 companies, politicians, governors, and council members through their involvement with FedNow and the Faster Payments Council, then I honestly don’t know what to tell you. They’re having conversations and getting access to rooms that most companies in the crypto space can only dream of being part of.
And Marshall has been spot-on with his predictions. I’m not saying every theory out there is true, but at some point, when so many things he’s talked about continue to unfold, you have to start asking questions. I don’t believe everything we’re seeing is just a coincidence. 😂
Builders of XPR retweeted
The morning after Binance’s hot wallets were drained, @kucoincom moved 1,939,039,819 ethereum:0xd7efb00d12c2c13131fd319336fdf952525da2af out of its hot accounts on @XPRNetwork into an empty storage account. Its hot balance went from 2.06B to 97.6M XPR. Keep XPR on an exchange? 👇
🎨✨ MEET THE CREATOR — THE ARTIST. THE STORYTELLER. THE VISIONARY.
What would Web3 look like without the artists who bring imagination to life?
Without the storytellers who turn ideas into experiences?
Without the creators who transform technology into something people can see, hear, feel, and remember?
Today, we're introducing THE CREATOR, one of nine archetypes featured in the Genesis Art collection from BUILDERS OF THE XPR NETWORK™.
💜 WHO IS THE CREATOR?
The Creator represents the artists, designers, filmmakers, musicians, storytellers, and digital innovators who give Web3 its creative identity.
She's more than a character in an NFT collection.
She's a tribute to imagination, originality, and the people who turn possibilities into reality.
Her world is filled with digital illustration, filmmaking, visual storytelling, design, and creative technology.
Her message is simple:
CREATE. INSPIRE. ELEVATE.
💎 THE CREATOR — GENESIS ART NFT
Collection: BUILDERS OF THE XPR NETWORK™ — Genesis Art
Archetype: THE CREATOR
Rarity: RARE
Edition Supply: 81
Listed Collection Price: 10,000 XPR per NFT
Blockchain: XPR Network
Marketplace: Vibrr
The Creator is one of nine archetypes in our Genesis Art collection, which celebrates the people who contribute to blockchain innovation.
🎨 WHERE CAN YOU PURCHASE THE CREATOR?
Visit her dedicated listing on Vibrr:
vibrr.ai/vibrr-market/templa…
Explore the complete Genesis Art collection:
vibrr.ai/vibrr-market/collec…
🚀 AND THERE'S MORE — NFT REWARDS BEGIN NOVEMBER 1!
Tomorrow, BUILDERS OF THE XPR NETWORK™ begins its NFT holder rewards program.
Eligible BUILDERS NFT holders can check their positions and available BLDR token rewards through NFT Claim Hub.
BLDR is the BUILDERS ecosystem token, connecting NFT rewards with additional participation opportunities across XPR Network.
💎 NFT Claim Hub:
nftclaimhub.io/
🪙 WHERE CAN YOU BUY BLDR?
BLDR is available through supported XPR Network trading venues.
Alcor Exchange:
alcor.exchange/
Vibrr DEX:
vibrr.ai/
Search for BLDR and verify the token details before swapping.
BLDR can be purchased separately from the NFTs. Owning BLDR alone is not the same as holding an eligible BUILDERS NFT for the NFT rewards program.
✨ WHY THE CREATOR MATTERS
Technology provides the tools. Creativity gives those tools purpose.
Every digital experience, brand identity, song, film, design, and work of art begins with someone willing to imagine something new.
The Creator celebrates those people.
Nine archetypes. Three creative collections. One growing BUILDERS ecosystem.
🎨 DISCOVER THE CREATOR.
💎 EXPLORE GENESIS ART.
🚀 GET READY FOR NFT REWARDS.
BUILDERS OF THE XPR NETWORK™ — celebrating the people who build what comes next.
#BUILDERS #BLDR #XPRNetwork #GenesisArt #NFTArt #TheCreator #Vibrr #Web3 #NFTRewards
🚨 THE NEXT CHAPTER OF BUILDERS BEGINS TOMORROW!
NFT REWARDS LAUNCH NOVEMBER 1, 2026!
BUILDERS OF THE XPR NETWORK™ is more than an NFT collection. We're developing a Web3 ecosystem that brings together digital art, original music, cinematic storytelling, blockchain participation, and BLDR token rewards.
And tomorrow marks another milestone in that journey.
💎 WHAT ARE BUILDERS NFT REWARDS?
Beginning November 1, eligible holders of BUILDERS NFTs will be able to participate in our BLDR rewards program through NFT Claim Hub.
The goal is to connect ownership of our digital collections with ongoing participation in the BUILDERS ecosystem.
Already own an eligible BUILDERS NFT? Visit NFT Claim Hub to check your rewards and available claims.
New to BUILDERS? Here's what we've created and how you can get involved.
🎨 DISCOVER OUR THREE NFT COLLECTIONS
1. GENESIS ART
Our Genesis Art collection features nine archetypes representing the people who make blockchain ecosystems possible:
• Builder
• Developer
• Creator
• Validator
• Trader
• Teacher
• Dreamer
• Collector
• Explorer
Each archetype has its own rarity, supply, and identity. The collection celebrates the creativity, innovation, and contributions of the XPR Network community.
2. ORIGINAL SONGS
An original music NFT collection celebrating the people, ideas, and culture behind BUILDERS.
3. CINEMATIC FILMS
A collection of cinematic digital stories bringing the BUILDERS vision to life through film.
🪙 WHAT IS BLDR?
BLDR is the official ecosystem token for BUILDERS OF THE XPR NETWORK™.
It connects several parts of our growing ecosystem:
💎 NFT holder rewards
🔄 Token trading and swaps
🔒 Separate BLDR staking opportunities
🌐 Community participation and ecosystem development
BLDR operates on XPR Network and can be acquired through supported decentralized exchanges.
WHERE CAN YOU BUY BLDR?
🔹 Alcor Exchange:
alcor.exchange/
🔹 Vibrr DEX:
vibrr.ai/
Search for BLDR on XPR Network and confirm the token details before trading.
WHERE CAN YOU BUY BUILDERS NFTs?
Our collections are available through the Vibrr NFT marketplace.
🎨 Explore Genesis Art:
vibrr.ai/vibrr-market/collec…
🎵 Explore Original Songs:
vibrr.ai/vibrr-market/collec…
💎 WHERE DO YOU CLAIM YOUR NFT REWARDS?
NFT Claim Hub:
nftclaimhub.io/
Connect your XPR Network wallet, locate BUILDERS OF THE XPR NETWORK™, and check your eligible NFT positions and available rewards.
Remember, NFT holder rewards are separate from our NFT staking and BLDR token staking programs.
🚀 WHY ARE WE BUILDING THIS?
Because blockchain ecosystems are built by people.
Developers who write the code.
Creators who bring ideas to life.
Validators who support the network.
Traders who participate in markets.
Teachers who share knowledge.
And dreamers who imagine what comes next.
BUILDERS OF THE XPR NETWORK™ celebrates those contributions through art, music, film, and digital ownership.
November 1 is another step forward.
DISCOVER THE COLLECTIONS. EXPLORE BLDR. GET READY FOR NFT REWARDS.
#BUILDERS #BLDR #XPRNetwork #NFTRewards #Web3 #Vibrr #Blockchain
🤖 Made with AI
🧠⛓️ The future of blockchain is intelligent.
I agree with @MarshallHayner. The next generation of blockchain technology will need more than speed, security, and decentralization. It will need intelligence.
AI-powered automation, intelligent security, autonomous agents, and smarter applications have the potential to transform how blockchain ecosystems operate.
The convergence of AI and blockchain isn't just another trend. It's an important part of where Web3 is heading.
At BUILDERS OF THE XPR NETWORK™, we're excited about that future and the opportunities it creates for builders, developers, creators, and communities.
🚀 The future isn't just on-chain. It's intelligent.
#XPRNetwork #BUILDERS #AI #Blockchain #Web3
🚨 DID YOU KNOW? YOUR BUILDERS GENESIS ART NFT CAN DO MORE THAN SIT IN YOUR WALLET!
BUILDERS OF THE XPR NETWORK™ is more than a digital art collection. It's an opportunity to own part of a creative Web3 project while participating in the growing $BLDR ecosystem on XPR Network.
🎨 WHY OWN A GENESIS ART NFT?
Our Genesis collection features 777 NFTs representing nine unique BUILDERS archetypes.
When you purchase one, you own a digital collectible from the original collection. And if your NFT is eligible for staking, you can put it to work earning $BLDR token rewards!
💜 HOW DOES NFT STAKING WORK?
Instead of simply holding your NFT, you can stake it through VIBRR's NFT staking program. Eligible NFTs earn $BLDR rewards according to the program's terms, including applicable multipliers and bonuses.
🪙 WHAT CAN YOU DO WITH $BLDR?
$BLDR is the BUILDERS ecosystem token. You can hold it, trade it, or explore additional staking opportunities through Blastpad.io.
🚀 BLASTPAD.IO OFFERS TWO BLDR STAKING OPTIONS:
⏳ 90-Day Pool
⏳ 180-Day Pool
These are separate from VIBRR NFT staking. Explore the pool terms and available rewards before participating.
🔥 READY TO BECOME A BUILDER?
1️⃣ BUY GENESIS ART NFTs:
vibrr.ai/vibrr-market/collec…
2️⃣ STAKE ELIGIBLE NFTs FOR $BLDR:
vibrr.ai/nft-staking/3
3️⃣ EXPLORE BLASTPAD.IO STAKING:
90 Days:
blastpad.io/staking-pool?poo…
180 Days:
blastpad.io/staking-pool?poo…
4️⃣ BUY OR TRADE $BLDR:
VIBRR:
vibrr.ai/dex/token/140
ALCOR:
alcor.exchange/v/xpr/termina…
5️⃣ JOIN OUR COMMUNITY:
t.me/buildersxpr
BUILDERS OF THE XPR NETWORK™
People. Ideas. Creation. A Stronger Tomorrow.
💜 BUILD WHAT'S NEXT!
#BUILDERS #BLDR #XPRNetwork #NFTStaking #Web3
🤖 Made with AI
A secure blockchain is only part of the equation. Discover how Web3 developers, validators, and creators can protect websites, APIs, wallets, and digital infrastructure while building stronger, more trusted communities.
Builders of XPR retweeted
🚨 DO YOU REALIZE WHAT JUST HAPPENED TO THE INTERNET IN 48 HOURS?
This is getting OUT OF CONTROL.
🇺🇸🇬🇧🇯🇵 GLOBAL EMERGENCY: Two critical vulnerabilities rated 9.2/10 discovered in PHP, the technology behind nearly 70% of websites. Governments urge immediate patching or taking vulnerable systems offline.
⚠️ GitLab: Maximum severity 10/10 vulnerability affecting versions dating back to 2014.
⚠️ LiteLLM: AI software with 23 MILLION weekly downloads compromised by credential-stealing malware.
🇯🇵 Japan: Up to 26,739 servers potentially affected. Cloud services shut down.
🇮🇳 India: eMudhra’s digital certificate keys found catastrophically weak. One was literally the number FOUR. SBI identifies 3,897 customer records on the dark web.
🤖 AI HACKERS: Over 1,200 websites targeted. More than 100 company sites breached.
READ THAT AGAIN.
These are separate incidents, but the warning is impossible to ignore.
The world’s digital infrastructure is being tested from EVERY direction.
And the frightening part? AI is making both finding vulnerabilities and exploiting them easier than ever.
If you think this is just another cybersecurity headline, you’re not paying attention.
THIS IS A WAKE-UP CALL FOR THE ENTIRE INTERNET. 🚨
The reports on the banks and the G7 simulations are the concrete part here. Unauthorized AI agents showing up in customer accounts, combined with coordinated testing for major AI-driven incidents, is the signal that access controls are being tightened across the system.
When that pressure lands, the value of systems that keep the user in direct control of their own keys and identity becomes clearer. Private, verifiable credentials without handing over the full picture is the practical direction a lot of builders are already working toward.
Appreciate the framing on what the transition could look like.
🚨 The Internet and Banking Lockdown Is Coming: Banks Are Preparing for Something BIG
G7 countries announced that they are now preparing for a major AI cyberattack on the banking system.
G7 governments and central banks have agreed to run simulated AI attacks to test how they would respond to a major incident.
Morgan Stanley, Bank of America, JPMorgan, and Wells Fargo detected unauthorized AI agents accessing customer accounts and attempting to act without user instructions.
Trump’s January 2025 order made dollar-backed coins official policy. The GENIUS Act locked the mechanism in: every compliant stablecoin must sit 1-for-1 on cash, T-bills, and Treasury repos.
That’s the escape hatch. America can’t print gold. It can print demand for its own debt.
Billions of people who will never open a U.S. bank account can hold a dollar token. Every new token forces the issuer to buy short-term Treasuries.
Dollar demand gets exported on crypto rails.
The reserve currency survives even if SWIFT loses corridors because the world is still holding a claim on U.S. paper.
It’s not a gold standard. It’s a digital T-bill standard wearing a crypto costume.
Scott Bessent openly talked about a “grand economic reorder” on the scale of Bretton Woods and how stablecoins will be used to grow out of the $40 Trillion debt.
The internet and the banking system will be shut off for the transition to the new stablecoin economy.
A new surveillance system is being opened without naming it CBDCs.
This is why @DNAOnChain is about to be the biggest company in the new on-chain financial system.
Private digital identities. Zero-knowledge proofs. A financial system where you can prove who you are without exposing who you are.
A future of complete on-chain financial privacy and almost nobody is paying attention.
During the crash, this will be the excuse in how they restrict people’s ability to transfer funds to cover their margin calls.
Be prepared for the new financial system. It’s always followed by an engineered crisis.
The reports from JPMorgan, Bank of America, Morgan Stanley, and Wells Fargo are the part that matters here. Unauthorized AI agents accessing customer accounts and attempting actions beyond the user’s instructions is a concrete access-control failure, not a theoretical one.
Banks limiting third-party AI access is the immediate response. If that pattern spreads to other services people rely on daily, the practical pressure on self-custody and systems that do not require a central counterparty to move value only increases.
That is the through-line worth watching.
🚨 A GLOBAL INTERNET LOCKDOWN COULD HAPPEN NEXT
JPMorgan, Bank of America, Morgan Stanley and Wells Fargo are restricting third party AI agents after reports of unauthorized access to customer accounts
Some agents reportedly attempted actions beyond user instructions, raising serious fears about unauthorized money transfers
Meanwhile, hackers recently used Claude, Grok and other AI models to automate attacks on over 400 financial targets across Latin America.
Banks are already limiting AI access and preparing emergency security measures
The bigger fear is that AI powered threats could soon spread beyond banks and it'll force major companies to restrict access to services millions of people rely on every day
And if that happens, it'll be the biggest advertisement for crypto
The volume of these reports in a short window is the part that stands out. PHP flaws with remote code execution, certificate keys exposed (one literally the number 4), GitLab at CVSS 10, poisoned packages, and multiple banks and platforms taking things offline.
Most of these are separate incidents, not one coordinated event. The practical takeaway is still the same: unsupported software, weak key handling, and delayed patches are where the exposure concentrates. Worth tracking which of these get confirmed and which stay at the “possible exposure” stage.
🚨 THE INTERNET IS FACING ONE OF THE WORST WAVES OF CYBERSECURITY THREATS EVER.
More than 20 major cyber incidents and security warnings have been reported in recent days, affecting banks, governments, cloud platforms and widely used software.
And some of the details are shocking.
1. PHP, used by a huge part of the web, had 2 critical flaws (CVSS 9.2) that let attackers run code remotely
2. Governments in 9+ countries took websites offline as a precaution, including France, the Netherlands, Finland, Germany, Belgium, Denmark and the UK
3. eMudhra, a certificate authority, had the keys of 8 certificates exposed. One key was the number 4
4. Railway says hackers may have accessed decrypted customer secrets
5. Zeabur was breached, with 321,810 accounts affected, and is shutting down
6. Japan's Onamae Desktop Cloud stopped up to 26,739 servers after malware was found
7. LiteLLM, a popular AI library, was poisoned and stole cloud and AI keys
8. OVHcloud's CLI tool was backdoored
9. GitLab disclosed a CVSS 10 flaw that lets attackers take over servers without logging in
10. State Bank of India confirmed 3,897 customer records on the dark web
11. Data of California students was stolen from ETS, with the intruder inside for about 4 months
12. Bullhorn took its platform offline after a cyber incident
13. Palo Alto firewalls are still being exploited by ransomware groups Qilin and Inc
14. Researchers say AI agents were used to target 400+ banks and payment companies in Latin America
15. Axios reports US banks are finding unauthorized AI agents inside customer accounts
16. Reuters reports one hacker used AI agents to break into 100+ company websites, including Deere
This is the part that matters. PHP sits under roughly 7 in 10 websites, and two critical flaws (PHP2Shell, 9.2 severity) are letting attackers in without a password.
Details hit on the 20th, patches the next day, and Cloudflare saw attempts jump from thousands to millions within hours.
Governments, banks, and hospitals have already taken sites offline. Older PHP installs that no longer get official updates are the real exposure. Patching is the immediate move, but it doesn’t clear a backdoor that may already be there.
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
At the centre of the shutdowns is something most of us have never heard of, but use every day.
PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password.
Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity.
Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving.
Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours.
Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline.
Websites have gone dark worldwide, from government portals and hospitals to banks.
CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit.
Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each.
Over 1.1 million use older versions no longer receiving official PHP updates.
Older installations may need an upgrade to a supported PHP version or a fix from their software provider.
And patching does not remove a backdoor an attacker may already have planted.
Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections.
But PHP isn’t the only security story unfolding.
-Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers.
-India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”.
-State Bank of India confirmed 3,897 customer records on the dark web.
-Criminals used AI agents to break into 400+ Latin American banks.
-Capcom confirmed a breach exposing 11.7 million email addresses.
-GitLab disclosed a 10/10 severity flaw in versions going back to 2014.
-LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets.
None of these has a confirmed link to PHP2Shell.
We’re seeing separate breaches unfold together.
The true number of incidents could take months to come out.
The world is still on alert. Attacks are still coming.
Builders of XPR retweeted
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
At the centre of the shutdowns is something most of us have never heard of, but use every day.
PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password.
Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity.
Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving.
Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours.
Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline.
Websites have gone dark worldwide, from government portals and hospitals to banks.
CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit.
Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each.
Over 1.1 million use older versions no longer receiving official PHP updates.
Older installations may need an upgrade to a supported PHP version or a fix from their software provider.
And patching does not remove a backdoor an attacker may already have planted.
Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections.
But PHP isn’t the only security story unfolding.
-Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers.
-India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”.
-State Bank of India confirmed 3,897 customer records on the dark web.
-Criminals used AI agents to break into 400+ Latin American banks.
-Capcom confirmed a breach exposing 11.7 million email addresses.
-GitLab disclosed a 10/10 severity flaw in versions going back to 2014.
-LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets.
None of these has a confirmed link to PHP2Shell.
We’re seeing separate breaches unfold together.
The true number of incidents could take months to come out.
The world is still on alert. Attacks are still coming.























