tt

A serious security vulnerability has been found in the open-source server software Apache HTTP Server. Attackers can exploit this vulnerability to corrupt server memory by crafting requests when they have access to the affected service, allowing them to execute code with the privileges of the web service process. The vulnerability is located in the HTTP/2 module, and attackers can trigger a concurrent synchronization flaw without authentication, leading to heap memory corruption. If successfully exploited, it allows code execution with the privileges of the Apache worker process and access to data that the process can read.The affected range includes Apache HTTP Server versions 2.4.55 to 2.4.70, as well as mod_h2 versions 2.0.8 to 2.0.42 used separately from GitHub. Red Hat stated that the risk involves servers that enable HTTP/2 through the Protocols directive, including H2 for encrypted connections and H2C for plaintext connections. Administrators need to check both global configurations and individual virtual host configurations; if a CDN or reverse proxy is deployed on the website frontend, it is also necessary to check whether the Apache origin server can be accessed directly via HTTP/2.Apache released HTTP Server 2.4.71 on November 11, 2026, and it is recommended that websites using Apache upgrade immediately. If an upgrade cannot be performed temporarily, HTTP/2 can be disabled as a temporary measure. The issue lies in the assign_headers() function of mod_http2. HTTP/2 allows multiple requests to be processed concurrently over the same connection, and the affected code has a synchronization flaw when handling shared resources, which may lead to heap memory corruption. This vulnerability was discovered by the Anthropic OSS Scanner open-source project and the Google Cloud vulnerability research team. Anthropic reported it to the Apache Foundation on October 26, and the Google Cloud team reported the same vulnerability on November 3.

According to Bloomberg, NVIDIA CEO Jensen Huang was dismissed by the board on the evening of November 11 local time due to an extramarital affair scandal, and Chief Financial Officer Colette Kress has taken over as interim CEO.Insiders revealed that after weeks of denial, Huang broke down emotionally at the last moment, his iconic energy depleted, and began using phrases like "whatever" and "I don't care," lamentingly degrading himself as "a pile of shit." The dismissal was triggered by the exposure of his extramarital affair with a suspected Alice Huang, followed by revelations of a relationship with another executive.Currently, NVIDIA's board has hired a law firm to investigate. Huang is expected to testify before Congress regarding the related events in the coming weeks.

According to GMGN data, the top 5 tokens with net inflow in the past 24 hours are as follows:FOOD (FTu5....ump): Net inflow of $4,000, with a 24-hour increase of 19351.5%, currently priced at $0.0005.DacityCoin (4rYs....ump): Net inflow of $1,000, with a 24-hour decrease of -41.3%, currently priced at $0.0003.SPCX (SPCX....mGb): Net inflow of $939, with a 24-hour increase of 0.3%, currently priced at $140.995.THRONG (FQbU....ump): Net inflow of $791, with a 24-hour increase of 9077.3%, currently priced at $0.0003.Biberty (ArvN....ump): Net inflow of $729, with a 24-hour increase of 3.2%, currently priced at $0.0001.

According to Politico, Tim Scott, the chairman of the U.S. Senate Banking Committee, has requested that former NVIDIA CEO Jensen Huang and U.S. Secretary of Commerce Gina Raimondo testify next month before the committee regarding Jensen Huang's extramarital affair.Scott sent letters to both Jensen Huang and Gina Raimondo on Thursday evening, requesting their attendance at the Senate Banking Committee hearing. This move indicates that two oversight hearings will be held next month.

According to Crypto Briefing, users of hardware wallet manufacturer SafePal are facing phishing letter attacks after a customer data breach. Attackers used previously leaked data to send fake letters containing QR codes to some Italian users, claiming firmware security issues, with the QR codes directing to phishing websites.SafePal disclosed this breach in August, affecting approximately 39,798 customers. The leaked information includes names, addresses, and purchase details, but private keys and mnemonic phrases were not affected. As of now, SafePal has confirmed that these letters are scams and has taken down over 30 related fraudulent websites. The company has previously notified affected customers and implemented preventive measures, such as limiting the data retention period to 90 days.

Pando Rings attackers bought 7,548 ETH and transferred 4,000 ETH to Tornado Cash about 7 hours ago.

The blockchain game project MapleStory Universe (MSU) announced on its platform that due to the discovery of unauthorized external access to part of its off-chain server infrastructure, all services will be placed in maintenance mode starting from November 12, 2026, at 12:43 Beijing time. Preliminary investigations indicate that the blockchain and smart contracts were not affected, and on-chain records and wallets show that this incident did not result in asset transfers or theft, and user wallet private keys were never uploaded to the MSU system.The attackers obtained records of some users after November 5 at 07:26, including wallet addresses, nicknames, avatars, login history, some email addresses, associated social account information, OpenAPI usage records, and transaction and service activity records, but did not include real names, phone numbers, physical addresses, KYC, or payment card information. In addition, information registered for 328 applications in the Builder Center was also accessed, but the exposed API keys could not affect assets. MSU has cut off the attack path, revoked leaked credentials, and replaced affected servers, and will replace all operational keys before restoring services.

Analyst Ming-Chi Kuo stated that Jensen Huang's departure could create market opportunities for Google's self-developed AI chip TPU. Kuo mentioned that Tim Cook excels in cost management, but Jensen Huang performs better in new technology planning and development.

According to The Block, Anchorage Digital announced a partnership with Visa to use a portion of the stablecoins issued by its federally chartered bank as native settlement assets on the Visa network, with the first supported being the Western Union stablecoin USDPT. Visa and eligible partners can now settle VisaNet debts using USDPT, and both parties will establish a framework to evaluate the inclusion of more stablecoins issued by Anchorage.USDPT was launched on Solana in May of this year, issued and custodied by Anchorage Digital Bank.

Bitcoin News posted on platform X that the Brazilian exchange Mercado Bitcoin reopened read-only accounts a week after being attacked, resulting in an estimated loss of about 49 million dollars. Users can view their balances as of the day the attack occurred, but withdrawals are currently not possible, and the exchange has not announced a timeline for resuming withdrawals.Mercado Bitcoin stated that it has 4.8 million customers and will cover all losses with company funds, but has not explained how the attackers accessed its wallets. After withdrawals are resumed, they will only be processed through Pix, and users will need to reconfirm their information, with withdrawals only allowed to accounts under their own names.

According to The Block, the DeFi Education Fund, Paradigm, Uniswap, and a16z led the submission of an amicus brief supporting the legal challenge by the crypto industry against Illinois' Digital Asset Tax Act. Aave Labs, Chainlink Labs, Figment, Phantom, Hyperliquid Policy Center, Solana Policy Institute, Stand With Crypto, and others co-signed the brief.The brief argues that the law is overly broad, imposes unfavorable tax treatment on transactions involving blockchain technology, and fails to clearly distinguish between taxable digital asset businesses and software and network infrastructure that helps users trade independently. It is estimated that 2.64 million residents in Illinois hold digital assets, ranking fifth in the nation.The law was signed by Illinois Governor JB Pritzker in June 2026 and imposes a 0.2% tax on digital asset transactions, originally set to take effect in January 2027 but postponed to July 2027. The Blockchain Association, Crypto Council for Innovation, and The Digital Chamber had previously filed a lawsuit against Illinois regarding this matter.

NVIDIA's board of directors announced today that co-founder Jensen Huang has resigned from his positions as President, Chief Executive Officer, and Director, effective immediately. The company's current Executive Vice President and Chief Financial Officer Colette Kress will serve as interim CEO while continuing to manage the company as CFO. The board has initiated the selection process for a new CEO, considering both internal and external candidates.The 58-year-old Kress joined NVIDIA in September 2013 and has been with the company for over 13 years, being one of the core management members who accompanied NVIDIA's growth from a graphics chip manufacturer to a global AI chip giant. During her tenure, NVIDIA's annual revenue grew from approximately $4.1 billion in fiscal year 2013 to $21.59 billion in fiscal year 2026.Before joining NVIDIA, Kress worked at Cisco for 3 years and spent 13 years at Microsoft, where she served as the financial leader of the Server and Tools division, and also worked at Texas Instruments for 8 years. She has long been responsible for NVIDIA's financial strategy, capital allocation, performance disclosure, and investor relations, serving as an important representative for the company in communications with Wall Street, and has participated in the company's quarterly earnings call multiple times.

According to PR Newswire, Deloitte announced the launch of the enterprise AI company Edisyl, which was established after Deloitte completed the acquisition of the on-chain data platform Flipside Crypto's AI business in July 2026. The 24-person operations team from Flipside has all joined Edisyl, with former Flipside CEO Dave Balter serving as co-founder.Flipside's crypto data business has been sold separately to Sonaverse.

NVIDIA announced that CEO Jensen Huang has resigned from his positions as President, Chief Executive Officer, and Board Member effective immediately.In addition, NVIDIA has appointed Colette Kress as the interim Chief Executive Officer while she continues to serve as Executive Vice President and Chief Financial Officer; Harvey C. Jones has been appointed as the company's first Chairman of the Board.