Skip to content
CZ Warns of Phishing Threats, AI Hacking Fears Overblown

CZ Warns of Phishing Threats, AI Hacking Fears Overblown

First seen 23 Oct 2026, 07:12 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 23, 2026 at 08:12 UTC
  • •CZ argues AI hacking fears are exaggerated; phishing is the real threat.
  • •Two critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) were disclosed recently.
  • •Users should be cautious of unexpected messages and verify links.

Changpeng 'CZ' Zhao, founder of Binance, stated on October 23, 2026, that fears surrounding AI's ability to hack crypto encryption are exaggerated. He emphasized that AI poses a greater risk through enhanced phishing tactics and social engineering, rather than breaking encryption. CZ highlighted that the cryptography used in crypto systems is robust, while traditional banking systems often use weaker encryption. He also pointed out two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, disclosed on October 21 and 22, 2026, which could allow remote code execution on servers. His advice for crypto users includes being cautious with unexpected messages and verifying links before connecting wallets. The overall message is that security incidents often arise from operational lapses and user-targeted scams.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
CVE-2026-109619 published
A critical PHP vulnerability allowing remote code execution was disclosed, affecting unpatched servers.
Tradingview
2026-10-22
CVE-2026-109618 published
Another critical PHP vulnerability was disclosed, also allowing remote code execution on unpatched servers.
Tradingview
2026-10-23
CZ addresses AI hacking fears
CZ stated that AI's threat to crypto is overstated, emphasizing phishing and social engineering risks instead.
Tradingview

More articles in this cluster (2)

Following this threat?

Track CVE-2026-109618 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4

Common questions

What are the PHP vulnerabilities?
CVE-2026-109618 and CVE-2026-109619 are critical vulnerabilities in PHP that allow remote code execution on unpatched servers.
How should crypto users protect themselves?
Users should treat unexpected messages with suspicion, verify links, and assume some personal data may be compromised.
What did CZ say about AI in crypto?
CZ stated that fears of AI breaking crypto encryption are overblown, with phishing and social engineering posing greater risks.