forex cross rate

According to the Financial Times, Turkey's low-cost air defense system, Korkut, is selling well and has been deployed in nine countries, reportedly shooting down "potentially hundreds" of drones. An undisclosed number of Korkut systems have been deployed to a unit of the Ukrainian Air Force.

The yield on Japan's 40-year government bonds fell 3.5 basis points to 4.015%.

Japanese Prime Minister Sanae Takaichi: Yesterday, my office immediately contacted website and server administrators to temporarily disable the website before taking further action. The necessary measures have just been completed, and the website is now accessible again. Personally, I believe that some companies are still temporarily shutting down their websites to address PHP vulnerabilities.

I. PHP2Shell: Webpage Master Key Copied 1. PHP is a "engine" language for website backends. Many websites (especially content management systems, e-commerce sites, and forums) use it to generate dynamic pages and connect to databases. 2. Two vulnerabilities were recently exposed that allow remote control of servers without usernames or passwords, affecting almost all versions of PHP from 5.4 to 8.5.11. An official patch was released on October 21st, but no further fixes are provided for versions 8.1 and earlier. II. GitLab: A "Doorless Intrusion" with a Perfect 10/10 Rating 1. GitLab is a "one-stop shop" for software development. Development teams use it to store code, review modifications, automate testing, and deploy. Many companies install it on their own servers (self-hosting GitLab). 2. Self-hosted GitLab servers, starting from version 7.0, are all affected. Attackers do not need to log in; they can execute arbitrary code on the server simply by submitting a carefully crafted regular expression. An official fix was released on October 21st. III. LiteLLM 1.107.0: Malicious Version Leads to Complete Key Loss 1. LiteLLM is a commonly used toolkit for AI applications. Many AI products and agents use it to manage keys, distribute requests, and control costs. 2. On October 21st, its release process was compromised. A malicious version 1.107.0 remained logged in on PyPI and Docker for approximately 1 hour and 44 minutes. Once installed and started, it steals SSH keys, cloud service credentials, and AI tool keys, leaving a backdoor. IV. Node.js: Three Version Lines Have Issues, the Most Serious One Allows Remote Code Execution1. Node.js is a runtime environment that allows JavaScript to run on a server. Many website backends, real-time applications (chat, collaboration tools), and API services rely on it.2. A total of 10 vulnerabilities were patched across the three Node.js version lines: 22, 24, and 26. The most serious is the Brotli decoder out-of-bounds write vulnerability (CVE-2026-111497), which could lead to remote code execution and is rated "high risk".V. eMudhra: The Certificate Authority's "Lock" Was Opened in an Instant, Shaking the Foundation of HTTPS Trust1. eMudhra is an Indian "digital identity/certificate authority". 2. The private keys associated with eight intermediate certificates of this organization have serious security vulnerabilities; the key strength is abnormally weak and could be used to forge trusted website certificates. Chrome, Firefox, and Apple have already blocked these certificates. VI. Railway: Hosting Platform's "Safe" Broken, Some Passwords Leaked 1. Railway is a cloud deployment platform for developers. 2. The Railway hosting platform's encrypted environment variables were accessed, and some have been decrypted. Deployment has been suspended, and the official requirement is for all users to rotate their keys. VII. Agent2Shell: AI Programming Assistant "Execute First, Ask Later" 1. Agent2Shell is a type of attack targeting AI programming assistants. The AI programming tools involved (such as Claude Code, Cursor, Codex, and Gemini CLI) are intelligent assistants that help developers automatically write code, modify code, and execute terminal commands. 2. An attacker places a malicious configuration in the repository, and Claude Code, Cursor, Codex, and Gemini will execute the attacker's code before calling the model and displaying a trust confirmation. VIII. Cisco Expressway: Device Control with Root Access Without Login 1. Cisco Expressway is Cisco's enterprise video conferencing/unified communications gateway. 2. On October 21, Cisco disclosed a perfect edge-level vulnerability in the Expressway series. Attackers can execute arbitrary operating system commands with root privileges without authentication, as long as they have access to the device, and there are no temporary mitigation measures; only patching is possible. IX. CISA Adds Six Newly Exploited Vulnerabilities1. On October 20, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added six vulnerabilities to its list of known exploitable vulnerabilities, involving products such as Plex Media Server, EG Secure Solutions SiteGuard Server Edition, and Siemens Software Center. Among them, the DLL sideloading vulnerability (CVE-2026-110936) in Siemens Software Center has been confirmed to be actively exploited.

The European Automobile Manufacturers Association (EADA) reported that Nissan's new car registrations in Europe fell 16% in September. Toyota's new car registrations in Europe rose 1.7% in September. Hyundai's new car registrations in Europe fell 1.7% in September. BMW's new car registrations in Europe fell 0.3% in September. Volkswagen Group's new car registrations in Europe fell 2.9% in September.

Amazon is expected to receive settlement refund checks from Amazon, with accompanying notes attributing the refunds to "the Federal Trade Commission (FTC), led by President Trump." This unprecedented move comes just weeks before the U.S. midterm elections. The checks are part of a $2.5 billion settlement that Amazon (AMZN.O) agreed to pay in 2025. At the time, the FTC accused Amazon of misleading consumers into signing up for its Prime membership subscription service. According to two former FTC officials, this is the first time the agency has attributed a refund to a specific president. The accompanying notes use the phrase "the Federal Trade Commission, led by President Trump" three times. The notes state, "The enclosed checks are the result of a settlement reached between the FTC, led by President Trump, and Amazon, Inc.…"