Friday’s issue of The Cross Check Daily puts six lead stories side by side across Democracy Now, Just Security, Dryden Wire and other outlets. Each story shows what everyone agrees on and where the framing differs, followed by a markets snapshot, a research-backed health tip and a trivia question.
The Times reports the Pentagon and Israel have drawn up plans to resume strikes on Iran after the Nov. 3 midterms
Agree: The New York Times reports that the Pentagon and Israel’s military have drawn up specific plans to resume strikes on Iran after the Nov. 3 midterms, with likely targets including energy infrastructure, nuclear sites and missile and drone arsenals. Iran’s Revolutionary Guard says it set fire to four ships it accused of illegal oil transfers in the northern Persian Gulf and that three more ships hit mines. (Democracy Now)
Spin check: Just Security, summarizing Reuters, the Times and Axios, adds that the Guard warned of a wider response against US regional bases, and that dozens of Israeli fighter jets flew to the Iranian border on Monday, which officials said was unconnected to a Hegseth-Netanyahu meeting. Dryden Wire describes the reported plan as a “short but intensive” operation. Democracy Now adds that reports of explosions in the port city of Sirik followed Israeli war games along Iran’s western border. Factual disagreement: Where the mine strikes happened differs: Democracy Now places them in the Strait of Hormuz, while Just Security (citing Reuters) says west of it. Every ship incident is the Guard’s own account and none is independently confirmed in what we read, so we report them as claims.
Critical flaws in PHP force governments and organizations to take websites offline
Agree: Critical flaws in PHP, the programming language behind roughly 70% to 75% of websites, forced governments and organizations in several countries to take sites offline this week; the PHP Foundation released fixes late Wednesday. The FBI’s cyber division warned that attackers could run code remotely and advised taking sites offline if they cannot be updated immediately. (AP via KSAT)
Spin check: The Daily Record reports outages at the Dutch national Cyber Security Centre, the Port of Rotterdam and several hospital sites, Danish and Finnish government services taken down as a precaution, and Wikipedia and the Internet Archive briefly offline; it cites Censys data that about 1.5 million of 2.6 million hosts run a PHP version with no fix. AP says a coalition led by OpenAI worked on fixes for about two months and quotes the PHP Foundation admitting a “structural failure” over a delay, saying the issue was known since at least 2024. Just Security relays Cloudflare’s CEO saying the company saw thousands of exploit attempts. Factual disagreement: The timeline and scope differ. Democracy Now says researchers at Calif discovered the flaws Tuesday and that the BBC went offline, while The Daily Record says Calif found them Aug. 1 and AP says the Foundation knew of the issue since 2024. Neither of those reports mentions the BBC. We use AP and The Daily Record and treat the Tuesday discovery and the BBC outage as unconfirmed.
A New Mexico judge orders Meta to pay $25 billion in penalties over how Facebook protects user data
Agree: A New Mexico judge ordered Meta to pay $25 billion in penalties after a jury found the company misled users about how Facebook protects their data, in a case that grew out of the Cambridge Analytica scandal. Meta says it is confident it will win on appeal. (Source NM)
Spin check: AP via NewsChannel 9 describes a $219.5 billion award reduced to $25 billion and cites the $5,000-per-violation ceiling, but does not report Meta’s response. Source NM quotes Meta’s chief legal officer C.J. Mahoney saying the ruling makes it “all but impossible to do business” in New Mexico and calling the suit a “tax on speech,” and says the penalty accrues 15% annual interest. Just Security, citing Axios, notes New Mexico was the only state to go to trial while 48 others settled. Democracy Now calls it the largest fine Meta has faced. Factual disagreement: The violation count differs: Source NM says close to 44 million, AP says more than 43 million. The framing of the sum also differs: AP calls $25 billion a reduction from $219.5 billion, while Source NM says it is below both the roughly $220 billion the judge said was possible and the $40 billion the state sought. We say “more than 43 million” and give both comparisons.
The Supreme Court leaves in place a block on limits to medical care for transgender federal inmates
Agree: The Supreme Court on Wednesday left in place a lower-court order blocking the Bureau of Prisons from enforcing a policy that restricts medical care for transgender inmates, in an unsigned order that gave no reasoning; Justices Samuel Alito and Clarence Thomas would have let the policy take effect. (AP via NewsChannel 9)
Spin check: AP reports the policy was adopted in February 2026 after a January 2025 executive order, would halt surgeries, taper hormone treatment and end accommodations such as makeup and wigs, and that about 600 inmates were on hormone therapy in 2025 per Bureau of Prisons court records; the administration argued the treatments raise security concerns, while inmates’ lawyers said the government had shown no such problems in 30 years. Democracy Now cites an ACLU estimate of about 2,000 transgender people in federal custody. Dryden Wire stresses the order was one line long. Framing difference: AP says the Court “left in place” a block, Democracy Now says it blocked the administration from “denying” care, and Just Security says it refused to let the policy be enforced “immediately.” The 600 and 2,000 figures count different things (inmates on hormones versus all transgender people in custody), so they do not conflict.
Nigeria confirms its first Ebola case, a woman the Health Ministry says arrived from Uganda
Agree: Nigeria confirmed its first Ebola case in Abuja on Tuesday, a woman the Health Ministry says arrived from Uganda; her symptoms began Oct. 7, she was admitted to a private hospital Oct. 11, and officials are tracing 44 contacts. The outbreak, caused by the Bundibugyo virus, has infected more than 9,000 people. (OPB)
Spin check: Al Jazeera also reports a woman from Uganda, adds that Kenya confirmed a ninth case in one cluster, and says there is no licensed vaccine or specific treatment for the Bundibugyo strain; it says the European Centre for Disease Prevention and Control calls this the second-largest Ebola epidemic on record. OPB quotes Africa CDC’s director general saying nearly half of cases are fatal and that the WHO expects the outbreak to exceed the 2014 to 2016 West Africa epidemic. Democracy Now reports the patient came from Ethiopia, after earlier travel to Congo. Factual disagreement: The patient’s route differs: OPB and Al Jazeera say Uganda, Democracy Now says Ethiopia. The death toll also varies: more than 4,600 (Democracy Now), more than 4,300 (OPB) and more than 4,000 (Al Jazeera). We use Uganda, from the Health Ministry as reported by two outlets, and treat the toll as a range of roughly 4,000 to 4,600.
Ramaswamy’s campaign will spend $4 million on an ad featuring Amy Acton’s estranged mother
Agree: Republican Vivek Ramaswamy’s campaign for Ohio governor will spend $4 million on an ad in which Donna Arthur, the estranged mother of Democratic nominee Amy Acton, calls her daughter a liar; Vice President JD Vance said he was “disgusted” by Republicans who criticized the ad. (AP via KSAT)
Spin check: AP quotes Sen. Jon Husted saying “I would not have run that ad” and reports that Nikki Haley called Ramaswamy “a bad guy,” that Trump said he knew nothing about it, and that Acton’s campaign declined to answer Vance and posted a video of her brother backing her account of their childhood. Democracy Now reports Acton says she was sexually abused between ages 10 and 12 by her mother’s husband, who was charged with rape and indicted, and that Rep. Nancy Mace said she was “stunned and shocked.” Just Security, citing the Times and The Hill, says Vance called Acton a liar. Framing difference: AP quotes Vance saying Acton “lies about every single one of her positions” and that the ad’s contents are “not really my concern,” while Just Security’s summary reads his remarks as defending the ad itself. AP and Democracy Now both report the stepfather’s indictment; the ad’s claims about Acton’s account are her mother’s own.
Markets snapshot: AI-led tech selloff drags the S&P 500 and Nasdaq lower, while Brent jumps to $113.17
- S&P 500: 7,663.43 (-1.2%)
- Dow Jones Industrial Average: 52,867.98 (+0.02%)
- Nasdaq Composite: 26,008.86 (-2.6%)
- Brent crude: $113.17 (+4.0%)
Index figures are Thursday, October 22 closes from an AP market report (AP via KRMG). The S&P 500 fell 1.2%, its worst day since July, the Nasdaq dropped 2.6%, and the Dow edged up less than 0.1% (our calculation: +0.02%), while the Russell 2000 gained 0.1% to 2,784.03. AP says AI stocks fell again and pulled markets lower worldwide on worries that high interest rates could threaten the AI boom, that most US stocks actually rose but tech weakness outweighed them, that Treasury yields fell sharply, and that oil jumped on concerns about the war with Iran. AP’s write-up as we read it gave no oil or yield figures. Brent’s $113.17 settle (up $4.35, or 4.0%, the highest close since May 4) comes from Nation Thailand, which ties the rise to Houthi attacks on Saudi Arabia and attacks on ships in the Strait of Hormuz. We could not find a second source for that settle, so treat it as single-sourced.
Health & Longevity: Short walking breaks and blood sugar
The finding: A meta-analysis of seven one-day laboratory studies found that breaking up long stretches of sitting with light walking lowered blood sugar and insulin after meals compared with sitting continuously (a moderate effect on glucose, Cohen’s d = -0.72, and a moderate to large effect on insulin, d = -0.83). Standing breaks had only small effects, and neither standing nor walking changed systolic blood pressure.
The source: Relias Media‘s summary of Buffey et al., Sports Medicine, 2022 (52:1765-1787), a systematic review and meta-analysis. We could not open the original paper, so figures are as reported in this secondary summary.
Do this today: If you sit for long stretches, set a timer for every 30 minutes or so and take a few minutes to walk at an easy pace around the house or office.
Worth knowing: These were one-day lab experiments measuring short-term blood markers, not long-term health outcomes. The studies varied in break length, how “light walking” was defined and what meals were served, so the best break length and frequency are unknown (most studies interrupted sitting about every 28 minutes on average). Glucose gains were larger in normal-weight and overweight participants than in obese participants. This newsletter isn’t written by a medical professional and isn’t a substitute for advice from your doctor, so check with your doctor before changing your routine, especially if you have diabetes or take glucose-lowering medication.
World Trivia
PHP, the programming language at the center of this week’s security scramble, began as a personal project of one programmer in the early 1990s. What did the letters PHP originally stand for: Personal Home Page, Programmed Hypertext Processor, or Public Host Protocol?
Reveal the answer
Personal Home Page. According to Wikipedia, Danish-Canadian programmer Rasmus Lerdorf created it in 1993, and it was first made public in 1995, with the initial announcement on 8 June 1995.
Edited and published by Randy Wardle. Get The Cross Check Daily free every morning, or follow @GetCrossCheck on X. See the full archive of past issues and our corrections policy.
