{
"about": "Every item a reader can read on this site, with its id, zone, link and the hash of what it says now. assets/reader-state.js compares the hashes with what the reader last read, in their browser.",
"site": "0.22.33",
"items": {
"page-flaws": {
"kind": "page",
"zone": "research",
"title": "The two flaws",
"path": "flaws/index.html",
"hash": "5c16343c692a",
"v": 2,
"first": "0.1.0",
"changed": "0.3.0",
"date": "2026-10-22",
"history": "versions/page-flaws/index.html"
},
"page-timeline": {
"kind": "page",
"zone": "research",
"title": "Timeline",
"path": "timeline/index.html",
"hash": "21ed012b2ce0",
"v": 4,
"first": "0.1.0",
"changed": "0.3.1",
"date": "2026-10-22",
"history": "versions/page-timeline/index.html"
},
"page-discovery": {
"kind": "page",
"zone": "research",
"title": "Who found it",
"path": "discovery/index.html",
"hash": "0f3b5c295058",
"v": 5,
"first": "0.1.0",
"changed": "0.4.7",
"date": "2026-10-22",
"history": "versions/page-discovery/index.html"
},
"page-leak": {
"kind": "page",
"zone": "research",
"title": "How disclosure broke",
"path": "leak/index.html",
"hash": "6f26e132a945",
"v": 7,
"first": "0.1.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/page-leak/index.html"
},
"page-exploitation": {
"kind": "page",
"zone": "research",
"title": "Exploitation signals",
"path": "exploitation/index.html",
"hash": "7cb6b9c26818",
"v": 5,
"first": "0.1.0",
"changed": "0.3.2",
"date": "2026-10-22",
"history": "versions/page-exploitation/index.html"
},
"page-playbook": {
"kind": "page",
"zone": "research",
"title": "If you run PHP",
"path": "playbook/index.html",
"hash": "74d423474096",
"v": 3,
"first": "0.1.0",
"changed": "0.8.2",
"date": "2026-10-23",
"history": "versions/page-playbook/index.html"
},
"page-claims": {
"kind": "page",
"zone": "research",
"title": "Every claim",
"path": "claims/index.html",
"hash": "5040d3d35207",
"v": 16,
"first": "0.1.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/page-claims/index.html"
},
"page-numbers": {
"kind": "page",
"zone": "research",
"title": "The numbers",
"path": "numbers/index.html",
"hash": "eebb73f43685",
"v": 5,
"first": "0.1.0",
"changed": "0.14.30",
"date": "2026-10-24",
"history": "versions/page-numbers/index.html"
},
"page-agencies": {
"kind": "page",
"zone": "research",
"title": "The agencies",
"path": "agencies/index.html",
"hash": "1f471675ac4a",
"v": 3,
"first": "0.1.0",
"changed": "0.13.0",
"date": "2026-10-24",
"history": "versions/page-agencies/index.html"
},
"page-affected": {
"kind": "page",
"zone": "research",
"title": "Affected systems",
"path": "affected/index.html",
"hash": "6cf22d4469e2",
"v": 2,
"first": "0.1.0",
"changed": "0.3.0",
"date": "2026-10-22",
"history": "versions/page-affected/index.html"
},
"page-method": {
"kind": "page",
"zone": "site",
"title": "The method",
"path": "method/index.html",
"hash": "96f26ee7bab5",
"v": 12,
"first": "0.1.0",
"changed": "0.22.30",
"date": "2026-10-26",
"history": "versions/page-method/index.html"
},
"briefing-board": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Board member or executive",
"path": "briefings/board/index.html",
"hash": "43407c0d37d5",
"v": 20,
"first": "0.1.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-board/index.html"
},
"briefing-security": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Security lead",
"path": "briefings/security/index.html",
"hash": "f0c89b3aa72f",
"v": 11,
"first": "0.1.0",
"changed": "0.18.2",
"date": "2026-10-25",
"history": "versions/briefing-security/index.html"
},
"briefing-engineer": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: PHP or platform engineer",
"path": "briefings/engineer/index.html",
"hash": "ae0da9cfe745",
"v": 10,
"first": "0.1.0",
"changed": "0.17.2",
"date": "2026-10-24",
"history": "versions/briefing-engineer/index.html"
},
"briefing-journalist": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Journalist",
"path": "briefings/journalist/index.html",
"hash": "afa0d82178b2",
"v": 10,
"first": "0.1.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-journalist/index.html"
},
"briefing-researcher": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Security researcher",
"path": "briefings/researcher/index.html",
"hash": "f4630b498acf",
"v": 9,
"first": "0.1.0",
"changed": "0.17.0",
"date": "2026-10-24",
"history": "versions/briefing-researcher/index.html"
},
"briefing-analyst": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Analyst or advisor",
"path": "briefings/analyst/index.html",
"hash": "0d01a0995b93",
"v": 13,
"first": "0.1.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-analyst/index.html"
},
"fact-two-cves-9.2": {
"kind": "fact",
"zone": "research",
"title": "Two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, each CVSS v4.0 9.2, fix",
"path": "facts/two-cves-9.2/index.html",
"hash": "b2222ca4dae7",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-two-cves-9.2/index.html"
},
"fact-cvss-10": {
"kind": "fact",
"zone": "research",
"title": "The flaws are CVSS 10.0",
"path": "facts/cvss-10/index.html",
"hash": "5de3e8031bd1",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-cvss-10/index.html"
},
"fact-rce-modphp": {
"kind": "fact",
"zone": "research",
"title": "Unauthenticated RCE over HTTP against Apache mod_php with default settings, before any app",
"path": "facts/rce-modphp/index.html",
"hash": "de0376f32fa4",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-rce-modphp/index.html"
},
"fact-rce-fpm": {
"kind": "fact",
"zone": "research",
"title": "Remote code execution is confirmed on PHP-FPM",
"path": "facts/rce-fpm/index.html",
"hash": "be8a7f57d03b",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-rce-fpm/index.html"
},
"fact-fix-bailout": {
"kind": "fact",
"zone": "research",
"title": "The fix removes longjmp() for out-of-memory errors in favour of a delayed soft OOM at the ",
"path": "facts/fix-bailout/index.html",
"hash": "d60837dab5b1",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-fix-bailout/index.html"
},
"fact-fix-incomplete": {
"kind": "fact",
"zone": "research",
"title": "The 8.5.12 fix may be incomplete, or there is a third, different bug",
"path": "facts/fix-incomplete/index.html",
"hash": "903f23d083b2",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-fix-incomplete/index.html"
},
"fact-versions-old": {
"kind": "fact",
"zone": "research",
"title": "All PHP versions from 5 onwards are affected by at least one of the flaws",
"path": "facts/versions-old/index.html",
"hash": "50ba76d06044",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-versions-old/index.html"
},
"fact-only-update": {
"kind": "fact",
"zone": "research",
"title": "Updating is the only complete mitigation; the configuration measures reduce exposure to sp",
"path": "facts/only-update/index.html",
"hash": "32c25b4a6db1",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-only-update/index.html"
},
"fact-waf": {
"kind": "fact",
"zone": "research",
"title": "A web application firewall may provide some protection until systems are patched",
"path": "facts/waf/index.html",
"hash": "ad961b9eca40",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-waf/index.html"
},
"fact-wordpress-drupal": {
"kind": "fact",
"zone": "research",
"title": "In researchers' own tests, pre-authentication RCE was confirmed against WordPress, Drupal,",
"path": "facts/wordpress-drupal/index.html",
"hash": "210f23df1a6e",
"v": 2,
"first": "0.1.0",
"changed": "0.12.1",
"date": "2026-10-24",
"history": "versions/fact-wordpress-drupal/index.html"
},
"fact-scale-70pc-internet": {
"kind": "fact",
"zone": "research",
"title": "70% of the Internet is affected",
"path": "facts/scale-70pc-internet/index.html",
"hash": "6b8570b56fa3",
"v": 2,
"first": "0.1.0",
"changed": "0.12.1",
"date": "2026-10-24",
"history": "versions/fact-scale-70pc-internet/index.html"
},
"fact-scale-70pc-websites": {
"kind": "fact",
"zone": "research",
"title": "PHP is used by almost 70% of websites whose server-side language is known",
"path": "facts/scale-70pc-websites/index.html",
"hash": "19a767c80e7a",
"v": 2,
"first": "0.1.0",
"changed": "0.12.1",
"date": "2026-10-24",
"history": "versions/fact-scale-70pc-websites/index.html"
},
"fact-scale-30m": {
"kind": "fact",
"zone": "research",
"title": "Something like 30 million websites could be affected",
"path": "facts/scale-30m/index.html",
"hash": "6c115f410d62",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-scale-30m/index.html"
},
"fact-scale-2.6m-hosts": {
"kind": "fact",
"zone": "research",
"title": "VulnCheck counts about 2.6 million internet-facing hosts exposing PHP; Censys, of the 2.58",
"path": "facts/scale-2.6m-hosts/index.html",
"hash": "ebd922d80fc5",
"v": 3,
"first": "0.1.0",
"changed": "0.12.1",
"date": "2026-10-24",
"history": "versions/fact-scale-2.6m-hosts/index.html"
},
"fact-scale-latvia": {
"kind": "fact",
"zone": "research",
"title": "About 6,000 potentially affected resources in Latvia, a few hundred in the public sector",
"path": "facts/scale-latvia/index.html",
"hash": "2b4bcfa874e6",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-scale-latvia/index.html"
},
"fact-scale-ncsc-nl": {
"kind": "fact",
"zone": "research",
"title": "674 products in the NCSC-NL inventory: 206 vulnerable, 46 fixed, 418 under investigation, ",
"path": "facts/scale-ncsc-nl/index.html",
"hash": "1f75e174dd6e",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-scale-ncsc-nl/index.html"
},
"fact-ai-found": {
"kind": "fact",
"zone": "research",
"title": "The flaws were found by researchers using frontier AI under OpenAI's Patch the Planet init",
"path": "facts/ai-found/index.html",
"hash": "68655e4118b9",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-ai-found/index.html"
},
"fact-who-first": {
"kind": "fact",
"zone": "research",
"title": "Calif found the flaws first: discovery 1 August, hash commitment 5 August, report to PHP 1",
"path": "facts/who-first/index.html",
"hash": "21b6c41bbe7d",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-who-first/index.html"
},
"fact-openai-same-day": {
"kind": "fact",
"zone": "research",
"title": "OpenAI independently reported the same root cause on 11 August, with further vectors on 18",
"path": "facts/openai-same-day/index.html",
"hash": "e1a2c9d4e3fc",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-openai-same-day/index.html"
},
"fact-wiz-independent": {
"kind": "fact",
"zone": "research",
"title": "Wiz Research independently discovered the first flaw on 19 August and reported on 24 Augus",
"path": "facts/wiz-independent/index.html",
"hash": "6430bdc82682",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-wiz-independent/index.html"
},
"fact-four-reporters": {
"kind": "fact",
"zone": "research",
"title": "The GitHub advisories credit four reporters: lcfr-hax (Calif), sagitzadik-wiz (Wiz), amyb-",
"path": "facts/four-reporters/index.html",
"hash": "4713e9be60b0",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-four-reporters/index.html"
},
"fact-quarkslab-2024": {
"kind": "fact",
"zone": "research",
"title": "The out-of-memory issue was found in a 2024 audit by Quarkslab (funded through OSTIF and t",
"path": "facts/quarkslab-2024/index.html",
"hash": "ef56fae6483a",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-quarkslab-2024/index.html"
},
"fact-ahead-of-attackers": {
"kind": "fact",
"zone": "research",
"title": "Frontier AI found the flaw ahead of attackers, giving defenders time to prepare",
"path": "facts/ahead-of-attackers/index.html",
"hash": "30f37fdfd9d0",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-ahead-of-attackers/index.html"
},
"fact-most-severe": {
"kind": "fact",
"zone": "research",
"title": "The most severe flaws ever detected by AI",
"path": "facts/most-severe/index.html",
"hash": "2d9137bf826d",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-most-severe/index.html"
},
"fact-leak-cve-ids": {
"kind": "fact",
"zone": "research",
"title": "On 20 October at about 15:00 UTC the two CVE IDs began circulating on forums and social me",
"path": "facts/leak-cve-ids/index.html",
"hash": "3742e4a72141",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-leak-cve-ids/index.html"
},
"fact-leak-hn": {
"kind": "fact",
"zone": "research",
"title": "The leak started with an anonymous Hacker News post citing a reliable source, which came d",
"path": "facts/leak-hn/index.html",
"hash": "3f13b4da3cb0",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-leak-hn/index.html"
},
"fact-leak-watchtowr": {
"kind": "fact",
"zone": "research",
"title": "watchTowr confirmed in public that the bugs were real and posted both CVE numbers before t",
"path": "facts/leak-watchtowr/index.html",
"hash": "e5b40c4d9b0f",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-leak-watchtowr/index.html"
},
"fact-leak-video": {
"kind": "fact",
"zone": "research",
"title": "Calif mistakenly published a video around 20:00 UTC on 20 October showing its proof of con",
"path": "facts/leak-video/index.html",
"hash": "3129d7043422",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-leak-video/index.html"
},
"fact-leak-mitigations": {
"kind": "fact",
"zone": "research",
"title": "Mitigation advice given to a few critical-infrastructure providers from about 23:00 UTC on",
"path": "facts/leak-mitigations/index.html",
"hash": "99f9ebe62a56",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-leak-mitigations/index.html"
},
"fact-chainguard": {
"kind": "fact",
"zone": "research",
"title": "Chainguard unilaterally broke the embargo on 21 October at 07:41 UTC by publishing built i",
"path": "facts/chainguard/index.html",
"hash": "efcb96328d52",
"v": 2,
"first": "0.1.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-chainguard/index.html"
},
"fact-release-moved": {
"kind": "fact",
"zone": "research",
"title": "The release moved forward from 22 October 14:00 UTC to 21 October 14:00 UTC because of the",
"path": "facts/release-moved/index.html",
"hash": "8357420e3f96",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-release-moved/index.html"
},
"fact-disclosure-22oct": {
"kind": "fact",
"zone": "research",
"title": "The flaws were disclosed on 22 October 2026",
"path": "facts/disclosure-22oct/index.html",
"hash": "574cedc7a2e6",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-disclosure-22oct/index.html"
},
"fact-release-time": {
"kind": "fact",
"zone": "research",
"title": "The fixes were scheduled for 14:00 UTC on 21 October and were published between 13:31 and ",
"path": "facts/release-time/index.html",
"hash": "ff6c3c92981a",
"v": 2,
"first": "0.1.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/fact-release-time/index.html"
},
"fact-preannounce-time": {
"kind": "fact",
"zone": "research",
"title": "The pre-announcement was published at 19:30 UTC on 20 October",
"path": "facts/preannounce-time/index.html",
"hash": "1efe06eeeeb5",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-preannounce-time/index.html"
},
"fact-no-exploitation": {
"kind": "fact",
"zone": "research",
"title": "There is no evidence yet that hackers have exploited the flaw",
"path": "facts/no-exploitation/index.html",
"hash": "d77d00fd272c",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-no-exploitation/index.html"
},
"fact-cisa-none": {
"kind": "fact",
"zone": "research",
"title": "CISA has not observed exploitation; neither CVE is in the Known Exploited Vulnerabilities ",
"path": "facts/cisa-none/index.html",
"hash": "066f190bb07b",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-cisa-none/index.html"
},
"fact-nz-active": {
"kind": "fact",
"zone": "research",
"title": "Reports of active exploitation exist",
"path": "facts/nz-active/index.html",
"hash": "fc1ba26f1d1e",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-nz-active/index.html"
},
"fact-amazon-honeypot": {
"kind": "fact",
"zone": "research",
"title": "An exploit attempt hit an Amazon honeypot on 17 October from an anonymisation network; pro",
"path": "facts/amazon-honeypot/index.html",
"hash": "84c8a407b41a",
"v": 2,
"first": "0.1.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-amazon-honeypot/index.html"
},
"fact-cloudflare-traffic": {
"kind": "fact",
"zone": "research",
"title": "Cloudflare observed attack traffic targeting its customers after the leak, with attackers ",
"path": "facts/cloudflare-traffic/index.html",
"hash": "bf0395197e84",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-cloudflare-traffic/index.html"
},
"fact-probing": {
"kind": "fact",
"zone": "research",
"title": "Amazon and Cloudflare saw sites being probed for the flaw",
"path": "facts/probing/index.html",
"hash": "943478ded2fe",
"v": 2,
"first": "0.1.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-probing/index.html"
},
"fact-latvia-attempts": {
"kind": "fact",
"zone": "research",
"title": "Automated exploitation attempts were seen in Latvia; none succeeded",
"path": "facts/latvia-attempts/index.html",
"hash": "a2fc87d9b9db",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-latvia-attempts/index.html"
},
"fact-vibe-code": {
"kind": "fact",
"zone": "research",
"title": "Criminals are using AI to 'vibe code' an attack method",
"path": "facts/vibe-code/index.html",
"hash": "9a9113aa16f0",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-vibe-code/index.html"
},
"fact-offline-nsa": {
"kind": "fact",
"zone": "research",
"title": "If an immediate update is not feasible, take the system offline until it can be fully miti",
"path": "facts/offline-nsa/index.html",
"hash": "b20163c138b1",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-offline-nsa/index.html"
},
"fact-offline-cisa": {
"kind": "fact",
"zone": "research",
"title": "Organisations that cannot update immediately, or that run PHP 8.1 or older, should take PH",
"path": "facts/offline-cisa/index.html",
"hash": "5a2ee901d4d7",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-offline-cisa/index.html"
},
"fact-offline-ncsc": {
"kind": "fact",
"zone": "research",
"title": "'Where immediate remediation is not feasible, organisations should consider taking the sys",
"path": "facts/offline-ncsc/index.html",
"hash": "4e28584c9e6c",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-offline-ncsc/index.html"
},
"fact-offline-allies": {
"kind": "fact",
"zone": "research",
"title": "The UK's NCSC, the NSA and their counterparts in the EU and Australia advise taking system",
"path": "facts/offline-allies/index.html",
"hash": "201ef2c3ac6e",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-offline-allies/index.html"
},
"fact-affected-sites": {
"kind": "fact",
"zone": "research",
"title": "Parts of Wikipedia, Edinburgh council, French government sites, the University of Geneva, ",
"path": "facts/affected-sites/index.html",
"hash": "4d8b9095660c",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-affected-sites/index.html"
},
"fact-latvia-offline": {
"kind": "fact",
"zone": "research",
"title": "Latvia restricted access from abroad to several state digital resources, possibly until 26",
"path": "facts/latvia-offline/index.html",
"hash": "e8983e830ac0",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-latvia-offline/index.html"
},
"fact-gov-patch-required": {
"kind": "fact",
"zone": "research",
"title": "The risks require immediate patching across United States Government departments and agenc",
"path": "facts/gov-patch-required/index.html",
"hash": "f2b85d866aa7",
"v": 1,
"first": "0.1.0",
"changed": "0.1.0",
"date": "2026-10-22",
"history": "versions/fact-gov-patch-required/index.html"
},
"page-code": {
"kind": "page",
"zone": "research",
"title": "The code",
"path": "code/index.html",
"hash": "4437c0eba1fb",
"v": 3,
"first": "0.2.0",
"changed": "0.3.1",
"date": "2026-10-22",
"history": "versions/page-code/index.html"
},
"page-impact": {
"kind": "page",
"zone": "research",
"title": "Impact: offline vs compromised",
"path": "impact/index.html",
"hash": "f177ee3a9286",
"v": 14,
"first": "0.2.0",
"changed": "0.22.30",
"date": "2026-10-26",
"history": "versions/page-impact/index.html"
},
"page-defence": {
"kind": "page",
"zone": "research",
"title": "Detection and defence",
"path": "defence/index.html",
"hash": "a4414e4f895b",
"v": 3,
"first": "0.2.0",
"changed": "0.3.1",
"date": "2026-10-22",
"history": "versions/page-defence/index.html"
},
"page-context": {
"kind": "page",
"zone": "research",
"title": "In context: 2008 to 2026",
"path": "context/index.html",
"hash": "7ef5068a17c6",
"v": 6,
"first": "0.2.0",
"changed": "0.17.2",
"date": "2026-10-24",
"history": "versions/page-context/index.html"
},
"page-actors": {
"kind": "page",
"zone": "research",
"title": "Who says what",
"path": "actors/index.html",
"hash": "4cdd0dfcdd83",
"v": 3,
"first": "0.2.0",
"changed": "0.3.1",
"date": "2026-10-22",
"history": "versions/page-actors/index.html"
},
"briefing-ciso": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: CISO",
"path": "briefings/ciso/index.html",
"hash": "745249b7b5de",
"v": 18,
"first": "0.2.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-ciso/index.html"
},
"briefing-cto": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: CTO",
"path": "briefings/cto/index.html",
"hash": "dd3d43631924",
"v": 9,
"first": "0.2.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-cto/index.html"
},
"briefing-cfo": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: CFO",
"path": "briefings/cfo/index.html",
"hash": "dfbd8b482121",
"v": 20,
"first": "0.2.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-cfo/index.html"
},
"briefing-appsec": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Head of AppSec",
"path": "briefings/appsec/index.html",
"hash": "2d7d36579280",
"v": 11,
"first": "0.2.0",
"changed": "0.18.2",
"date": "2026-10-25",
"history": "versions/briefing-appsec/index.html"
},
"briefing-developer": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Developer",
"path": "briefings/developer/index.html",
"hash": "720d0b62011d",
"v": 7,
"first": "0.2.0",
"changed": "0.17.0",
"date": "2026-10-24",
"history": "versions/briefing-developer/index.html"
},
"briefing-comms": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Media and communications team",
"path": "briefings/comms/index.html",
"hash": "d7850ef96434",
"v": 15,
"first": "0.2.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-comms/index.html"
},
"fact-cf-millions": {
"kind": "fact",
"zone": "research",
"title": "Exploit attempts across Cloudflare's network: thousands in the ten hours before announceme",
"path": "facts/cf-millions/index.html",
"hash": "faea3148c960",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-cf-millions/index.html"
},
"fact-imperva-none": {
"kind": "fact",
"zone": "research",
"title": "No traffic matching the php2shell exploit patterns was seen during Imperva's pre-disclosur",
"path": "facts/imperva-none/index.html",
"hash": "4b6064f4db32",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-imperva-none/index.html"
},
"fact-huntress-none": {
"kind": "fact",
"zone": "research",
"title": "No exploitation observed on Huntress partner systems as of 20:30 UTC on 21 October; no pub",
"path": "facts/huntress-none/index.html",
"hash": "141cc4955d07",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-huntress-none/index.html"
},
"fact-watchtowr-itw": {
"kind": "fact",
"zone": "research",
"title": "watchTowr sees active exploitation attempts and lists the flaws as exploited in the wild",
"path": "facts/watchtowr-itw/index.html",
"hash": "c1ce33227e90",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-watchtowr-itw/index.html"
},
"fact-no-confirmed-compromise": {
"kind": "fact",
"zone": "research",
"title": "As of 12:14 UTC on 26 October, no named organisation has said it was compromised through p",
"path": "facts/no-confirmed-compromise/index.html",
"hash": "3ec79ad747d3",
"v": 9,
"first": "0.2.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/fact-no-confirmed-compromise/index.html"
},
"fact-pocs-wrong": {
"kind": "fact",
"zone": "research",
"title": "None of the public proof-of-concept exploits reviewed by VulnCheck has the correct mechani",
"path": "facts/pocs-wrong/index.html",
"hash": "c089dcd39151",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-pocs-wrong/index.html"
},
"fact-ac-high": {
"kind": "fact",
"zone": "research",
"title": "Triggering the bug is much easier than turning it into code execution; the CVSS vector say",
"path": "facts/ac-high/index.html",
"hash": "efc10b318c57",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-ac-high/index.html"
},
"fact-fix-authored": {
"kind": "fact",
"zone": "research",
"title": "The fix was authored on 18 October at 15:26 UTC and entered the public branches at 14:06 U",
"path": "facts/fix-authored/index.html",
"hash": "f368aa50de01",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-fix-authored/index.html"
},
"fact-fix-engine": {
"kind": "fact",
"zone": "research",
"title": "Both bugs are in the C engine, not in PHP code: the allocator's longjmp-based bailout on o",
"path": "facts/fix-engine/index.html",
"hash": "6d5543f92e8c",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-fix-engine/index.html"
},
"fact-more-paths": {
"kind": "fact",
"zone": "research",
"title": "Patching the demonstrated paths does not make the bailout mechanism safe; more paths shoul",
"path": "facts/more-paths/index.html",
"hash": "706f5b366644",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-more-paths/index.html"
},
"fact-waf-nine-hours": {
"kind": "fact",
"zone": "research",
"title": "Edge protections went live hours before disclosure: Cloudflare at 03:02 UTC; Imperva, Akam",
"path": "facts/waf-nine-hours/index.html",
"hash": "b5ba9318dfcc",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-waf-nine-hours/index.html"
},
"fact-nl-offline": {
"kind": "fact",
"zone": "research",
"title": "The Dutch government took NCSC.nl offline as a precaution, with no active misuse seen yet;",
"path": "facts/nl-offline/index.html",
"hash": "a21bc512db59",
"v": 2,
"first": "0.2.0",
"changed": "0.12.1",
"date": "2026-10-24",
"history": "versions/fact-nl-offline/index.html"
},
"fact-fi-offline": {
"kind": "fact",
"zone": "research",
"title": "Finland's state IT provider Valtori restricted public traffic to government web services f",
"path": "facts/fi-offline/index.html",
"hash": "ced3b762c743",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-fi-offline/index.html"
},
"fact-wikimedia-precaution": {
"kind": "fact",
"zone": "research",
"title": "The Wikimedia Foundation took down a number of systems 'as a precautionary measure until t",
"path": "facts/wikimedia-precaution/index.html",
"hash": "739e4afa5ab7",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-wikimedia-precaution/index.html"
},
"fact-weirdgloop-13h": {
"kind": "fact",
"zone": "research",
"title": "Weird Gloop turned off its wiki web servers for 13 hours and still served about 94% of pag",
"path": "facts/weirdgloop-13h/index.html",
"hash": "4d82869f9452",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-weirdgloop-13h/index.html"
},
"fact-edinburgh": {
"kind": "fact",
"zone": "research",
"title": "Edinburgh council's site went offline late on 21 October; the council called it 'essential",
"path": "facts/edinburgh/index.html",
"hash": "d4dca1b4912c",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-edinburgh/index.html"
},
"fact-oxford": {
"kind": "fact",
"zone": "research",
"title": "Oxford City Council: 'a precaution because of a worldwide issue with the underlying techno",
"path": "facts/oxford/index.html",
"hash": "382eb09c747c",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-oxford/index.html"
},
"fact-uk-list": {
"kind": "fact",
"zone": "research",
"title": "Edinburgh and Oxford councils, the Met Police and the Office for Budget Responsibility wer",
"path": "facts/uk-list/index.html",
"hash": "16c9b98771af",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-uk-list/index.html"
},
"fact-quarkslab-redacted": {
"kind": "fact",
"zone": "research",
"title": "Quarkslab's published audit summary lists 27 findings, two redacted because their fixes we",
"path": "facts/quarkslab-redacted/index.html",
"hash": "28d878d18f8b",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-quarkslab-redacted/index.html"
},
"fact-lorenc-ai-found": {
"kind": "fact",
"zone": "research",
"title": "Chainguard's team found the same bugs independently with an AI harness and a frontier mode",
"path": "facts/lorenc-ai-found/index.html",
"hash": "c6a216f4307e",
"v": 1,
"first": "0.2.0",
"changed": "0.2.0",
"date": "2026-10-22",
"history": "versions/fact-lorenc-ai-found/index.html"
},
"fact-kev-precedent": {
"kind": "fact",
"zone": "research",
"title": "The last PHP core RCE, CVE-2024-4577, was exploited in the wild one day after disclosure a",
"path": "facts/kev-precedent/index.html",
"hash": "3f9afc698c29",
"v": 2,
"first": "0.2.0",
"changed": "0.12.1",
"date": "2026-10-24",
"history": "versions/fact-kev-precedent/index.html"
},
"page-explained": {
"kind": "page",
"zone": "for-you",
"title": "Explained from the start",
"path": "explained/index.html",
"hash": "0d755da499ad",
"v": 2,
"first": "0.3.0",
"changed": "0.3.1",
"date": "2026-10-22",
"history": "versions/page-explained/index.html"
},
"page-glossary": {
"kind": "page",
"zone": "for-you",
"title": "Glossary: every term, in plain English",
"path": "glossary/index.html",
"hash": "93f61a98bd6d",
"v": 1,
"first": "0.3.0",
"changed": "0.3.0",
"date": "2026-10-22",
"history": "versions/page-glossary/index.html"
},
"briefing-everyone": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Curious reader",
"path": "briefings/everyone/index.html",
"hash": "70633ec179f2",
"v": 18,
"first": "0.3.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-everyone/index.html"
},
"briefing-site-owner": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Website owner",
"path": "briefings/site-owner/index.html",
"hash": "4a89e2700478",
"v": 9,
"first": "0.3.0",
"changed": "0.18.2",
"date": "2026-10-25",
"history": "versions/briefing-site-owner/index.html"
},
"briefing-pm": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Project or programme manager",
"path": "briefings/pm/index.html",
"hash": "10dcdf289912",
"v": 14,
"first": "0.3.0",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-pm/index.html"
},
"page-summary": {
"kind": "page",
"zone": "research",
"title": "The specialist summary",
"path": "summary/index.html",
"hash": "864ecfb4878f",
"v": 15,
"first": "0.3.1",
"changed": "0.22.30",
"date": "2026-10-26",
"history": "versions/page-summary/index.html"
},
"front-now": {
"kind": "front",
"zone": "research",
"title": "Front page: right now",
"path": "index.html#now",
"hash": "f54a83f91290",
"v": 7,
"first": "0.3.2",
"changed": "0.19.2",
"date": "2026-10-25",
"history": "versions/front-now/index.html"
},
"front-glance": {
"kind": "front",
"zone": "research",
"title": "Front page: at a glance",
"path": "index.html#glance",
"hash": "05c79922b221",
"v": 10,
"first": "0.3.2",
"changed": "0.22.30",
"date": "2026-10-26",
"history": "versions/front-glance/index.html"
},
"front-facts": {
"kind": "front",
"zone": "research",
"title": "Front page: the core facts",
"path": "index.html#facts",
"hash": "d3f7c32b0723",
"v": 6,
"first": "0.3.2",
"changed": "0.19.2",
"date": "2026-10-25",
"history": "versions/front-facts/index.html"
},
"front-unknown": {
"kind": "front",
"zone": "research",
"title": "Front page: what nobody knows yet",
"path": "index.html#unknown",
"hash": "ff3d58163fee",
"v": 3,
"first": "0.3.2",
"changed": "0.17.0",
"date": "2026-10-24",
"history": "versions/front-unknown/index.html"
},
"front-latest": {
"kind": "front",
"zone": "research",
"title": "Front page: latest",
"path": "index.html#latest",
"hash": "6471202d1aaf",
"v": 5,
"first": "0.3.2",
"changed": "0.17.0",
"date": "2026-10-24",
"history": "versions/front-latest/index.html"
},
"page-interview": {
"kind": "page",
"zone": "stories",
"title": "Interview: the editor",
"path": "interview/index.html",
"hash": "541f1653d7cb",
"v": 1,
"first": "0.3.2",
"changed": "0.3.2",
"date": "2026-10-22",
"history": "versions/page-interview/index.html"
},
"briefing-dpo": {
"kind": "briefing",
"zone": "for-you",
"title": "Briefing: Data protection officer",
"path": "briefings/dpo/index.html",
"hash": "32d159c99aa9",
"v": 12,
"first": "0.5.9",
"changed": "0.22.29",
"date": "2026-10-26",
"history": "versions/briefing-dpo/index.html"
},
"page-views-state": {
"kind": "page",
"zone": "stories",
"title": "The state of affairs, now",
"path": "views/state/index.html",
"hash": "16914f6587b0",
"v": 3,
"first": "0.10.3",
"changed": "0.14.30",
"date": "2026-10-24",
"history": "versions/page-views-state/index.html"
},
"ev-2024-15793a": {
"kind": "event",
"zone": "research",
"title": "Quarkslab audits PHP (funded through OSTIF and the Sovereign Tech Agency). While fixing one of its findings a PHP core d",
"path": "timeline/index.html",
"hash": "71077c2b47b7",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2024"
},
"ev-202606-713fe3": {
"kind": "event",
"zone": "research",
"title": "OpenAI launches Patch the Planet (a Daybreak initiative with Trail of Bits, HackerOne and Calif).",
"path": "timeline/index.html",
"hash": "5920dd54e07c",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"ev-20260730-e9dba7": {
"kind": "event",
"zone": "research",
"title": "Calif begins an audit of PHP under Patch the Planet; Volker Dusch accepts the invitation.",
"path": "timeline/index.html",
"hash": "1b3b4e9bd795",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-07-30"
},
"ev-20260801-da6332": {
"kind": "event",
"zone": "research",
"title": "Calif discovers 'multiple different paths independently leading to RCE that resurfaced the 2024 issues and new trigger p",
"path": "timeline/index.html",
"hash": "038b3bcfd380",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-08-01"
},
"ev-20260805T1554-46fe8a": {
"kind": "event",
"zone": "research",
"title": "Ryan Austin (@lcfr_hax) posts a SHA-256 hash on X as a commitment to one finding.",
"path": "timeline/index.html",
"hash": "b4b622405332",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-08-05T15:54Z"
},
"ev-20260819-7c09c4": {
"kind": "event",
"zone": "research",
"title": "Wiz Research discovers the first vulnerability using Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol; confirms RCE against Dru",
"path": "timeline/index.html",
"hash": "1acacd82a8c8",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-08-19"
},
"ev-20260811-c6d1af": {
"kind": "event",
"zone": "research",
"title": "Calif reports the first bug to PHP and coordinated disclosure begins. OpenAI independently reports the same root cause t",
"path": "timeline/index.html",
"hash": "1278af926d11",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-08-11"
},
"ev-20260814-6989f9": {
"kind": "event",
"zone": "research",
"title": "Calif shares an RCE proof of concept with PHP; PHP confirms it works on 15 August.",
"path": "timeline/index.html",
"hash": "507d3ed3623b",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-08-14"
},
"ev-20260821-639b80": {
"kind": "event",
"zone": "research",
"title": "Calif reports the second bug to PHP.",
"path": "timeline/index.html",
"hash": "f1567f29b4e7",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-08-21"
},
"ev-20260824-1367bb": {
"kind": "event",
"zone": "research",
"title": "Wiz reports to the PHP security team.",
"path": "timeline/index.html",
"hash": "53c305edb5e5",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-08-24"
},
"ev-20260827-ee0280": {
"kind": "event",
"zone": "research",
"title": "The GitHub security advisory is opened, credited to lcfr-hax, sagitzadik-wiz, amyb-oai and tomash-areion.",
"path": "timeline/index.html",
"hash": "15e7d1c1ac8f",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-08-27"
},
"ev-20260918-dc31b8": {
"kind": "event",
"zone": "research",
"title": "Further attack vectors reported by OpenAI.",
"path": "timeline/index.html",
"hash": "893ae6edbbfe",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-09-18"
},
"ev-20260921-f53fcb": {
"kind": "event",
"zone": "research",
"title": "PHP acknowledges Wiz's reports 'and begins developing a coordinated fix'.",
"path": "timeline/index.html",
"hash": "8ddda149a958",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-09-21"
},
"ev-20260925-c76192": {
"kind": "event",
"zone": "research",
"title": "The fix pull request is opened.",
"path": "timeline/index.html",
"hash": "24d0094bc78c",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-09-25"
},
"ev-202610-6f1a16": {
"kind": "event",
"zone": "research",
"title": "Cloudflare starts developing WAF protections 'since early October 2026'.",
"path": "timeline/index.html",
"hash": "c26d21961f78",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"ev-20261012T2103-14ef59": {
"kind": "event",
"zone": "research",
"title": "CVE-2026-109618 and CVE-2026-109619 are reserved.",
"path": "timeline/index.html",
"hash": "d4c8d8dc7436",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-12T21:03Z"
},
"ev-20261018-71bce1": {
"kind": "event",
"zone": "research",
"title": "The final fix commit is authored; the 7.4 backport branch's commit is dated 18:10:24Z.",
"path": "timeline/index.html",
"hash": "d4ab3aad4945",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-18"
},
"ev-20261018T1526-b4e5fd": {
"kind": "event",
"zone": "research",
"title": "Arnaud Le Blanc authors the fix, 'Avoid state corruption via bailout', with Ilija Tovilo, Jakub Zelenka, Nora Dossche an",
"path": "timeline/index.html",
"hash": "4819803ddb14",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-18T15:26Z"
},
"ev-20261019T1400-03aac0": {
"kind": "event",
"zone": "research",
"title": "Release commits for 8.5.12, 8.4.27, 8.3.36 and 8.2.35 are made under embargo (14:00 to 17:04 UTC).",
"path": "timeline/index.html",
"hash": "4da4ee4ee53b",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-19T14:00Z"
},
"ev-20261017-d512e3": {
"kind": "event",
"zone": "research",
"title": "An exploit attempt from an anonymisation-network IP hits an Amazon MadPot honeypot.",
"path": "timeline/index.html",
"hash": "b2231a514a98",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-17"
},
"ev-20261020-8e2375": {
"kind": "event",
"zone": "research",
"title": "Qualys publishes on the pre-announcement.",
"path": "timeline/index.html",
"hash": "7974e0770c72",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-20"
},
"ev-20261020T1500-2466b3": {
"kind": "event",
"zone": "research",
"title": "The two CVE IDs begin circulating on forums and social media with a wrong release time and a wrong CVSS of 10.0. Per Dau",
"path": "timeline/index.html",
"hash": "7d83acd585fe",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-20T15:00Z"
},
"ev-20261020T1930-fe4f90": {
"kind": "event",
"zone": "research",
"title": "php.net publishes the pre-announcement: release moved to 21 October 14:00 UTC, two critical vulnerabilities, CVSS v4.0 9",
"path": "timeline/index.html",
"hash": "d4783c221630",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-20T19:30Z"
},
"ev-20261020T2000-01b246": {
"kind": "event",
"zone": "research",
"title": "Calif 'mistakenly published a video' showing its proof of concept against several targets; copies circulate after it is ",
"path": "timeline/index.html",
"hash": "7b2173e053d3",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-20T20:00Z"
},
"ev-20261020T2022-846f42": {
"kind": "event",
"zone": "research",
"title": "Alan Coopersmith relays the php.net pre-announcement to oss-security.",
"path": "timeline/index.html",
"hash": "e488384da692",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-20T20:22Z"
},
"ev-20261020T2300-2c624a": {
"kind": "event",
"zone": "research",
"title": "The PHP project starts giving mitigation advice to a few critical-infrastructure providers; it 'may have leaked as well'",
"path": "timeline/index.html",
"hash": "b951fc42d6d6",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-20T23:00Z"
},
"ev-20261021T0200-abd71e": {
"kind": "event",
"zone": "research",
"title": "Amazon sees proof-of-concept attempts, then six hours of attempts from anonymised infrastructure.",
"path": "timeline/index.html",
"hash": "7393442e80ce",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T02:00Z"
},
"ev-20261021T0741-630513": {
"kind": "event",
"zone": "research",
"title": "Chainguard publishes built images containing the fix, 'more than six hours before the coordinated release'.",
"path": "timeline/index.html",
"hash": "006edf09bcfd",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T07:41Z"
},
"ev-20261021T0743-7c8969": {
"kind": "event",
"zone": "research",
"title": "Cloudflare's CTO reports early attacks emerging, before the release.",
"path": "timeline/index.html",
"hash": "f904f8af935e",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T07:43Z"
},
"ev-20261021T0836-82ecf0": {
"kind": "event",
"zone": "research",
"title": "ELLIO records its first sensor hit.",
"path": "timeline/index.html",
"hash": "a5bbec66c11d",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T08:36Z"
},
"ev-20261021T1330-805b97": {
"kind": "event",
"zone": "research",
"title": "CERT-EU's stated release time for the PHP fixes.",
"path": "timeline/index.html",
"hash": "441cefb5fb77",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T13:30Z"
},
"ev-20261021T1332-c5a5f0": {
"kind": "event",
"zone": "research",
"title": "Wiz posts 'BREAKING ... #PHP2SHELL ... impacting 70% of the Internet', 28 minutes before the planned release; the thread",
"path": "timeline/index.html",
"hash": "3f01c828a1be",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T13:32Z"
},
"ev-20261021T1334-2583ac": {
"kind": "event",
"zone": "research",
"title": "GHSA-6wmf-4rv5-p3rp (CVE-2026-109619) and, twelve seconds later, GHSA-w8hw-w9fx-j79w (CVE-2026-109618) are published by ",
"path": "timeline/index.html",
"hash": "337284e5483f",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T13:34Z"
},
"ev-20261021T1335-010212": {
"kind": "event",
"zone": "research",
"title": "Signed tags php-8.5.12, php-8.4.27, php-8.3.36 and php-8.2.35 are created.",
"path": "timeline/index.html",
"hash": "e74e9d678e90",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T13:35Z"
},
"ev-20261021T1348-21dfcf": {
"kind": "event",
"zone": "research",
"title": "The CVE record for CVE-2026-109618 is published; CVE-2026-109619 follows at 13:54:43Z.",
"path": "timeline/index.html",
"hash": "1c997ca64bb4",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T13:48Z"
},
"ev-20261021T1400-566ddf": {
"kind": "event",
"zone": "research",
"title": "The planned release time. php.net's advisory 'Critical remote code execution vulnerabilities, update now' and the four r",
"path": "timeline/index.html",
"hash": "f620d5a63229",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T14:00Z"
},
"ev-20261021T1404-4e4428": {
"kind": "event",
"zone": "research",
"title": "OpenAI posts: models 'helped researchers ... discover critical security flaws in PHP ... used to run an estimated 70% of",
"path": "timeline/index.html",
"hash": "8d59fad52885",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T14:04Z"
},
"ev-20261021T1406-fda751": {
"kind": "event",
"zone": "research",
"title": "The fix commit enters the public php-src branches (commit timestamp); merged into 8.3 at 14:12, 8.4 at 14:27 and 8.5 at ",
"path": "timeline/index.html",
"hash": "c26c4c6d2431",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T14:06Z"
},
"ev-20261021T1406-7d15e4": {
"kind": "event",
"zone": "research",
"title": "GitHub release php-8.5.12 is published by adoy.",
"path": "timeline/index.html",
"hash": "054310669030",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T14:06Z"
},
"ev-20261021T1417-c25442": {
"kind": "event",
"zone": "research",
"title": "NVD publishes both CVEs with the CNA's CVSS v4.0 9.2 and no NIST score.",
"path": "timeline/index.html",
"hash": "5f978555062d",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T14:17Z"
},
"ev-20261021T1441-27c589": {
"kind": "event",
"zone": "research",
"title": "Jakub Zelenka announces CVE-2026-109618 on oss-security; CVE-2026-109619 at 14:44:06Z.",
"path": "timeline/index.html",
"hash": "c7a5fe7c5509",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T14:41Z"
},
"ev-20261020-898d71": {
"kind": "event",
"zone": "research",
"title": "Swiss BACS posts a warning (home-page teaser dated 20 October; the page itself now says 21 October).",
"path": "timeline/index.html",
"hash": "632568ceec95",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-20"
},
"ev-20261021-3a93d8": {
"kind": "event",
"zone": "research",
"title": "CISA alert 'Critical Vulnerabilities in PHP Require Immediate Patching': take systems offline if you cannot update. NSA ",
"path": "timeline/index.html",
"hash": "4ea61b180bc6",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21"
},
"ev-20261021-603bc7": {
"kind": "event",
"zone": "research",
"title": "The Dutch NCSC takes its own website offline as a precaution; DigiD, MijnOverheid and Overheid.nl follow. Weird Gloop tu",
"path": "timeline/index.html",
"hash": "9347ce35fd42",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21"
},
"ev-20261021T0302-2ae6a2": {
"kind": "event",
"zone": "research",
"title": "Cloudflare's WAF protections go live for all customers, about nine hours ahead of disclosure.",
"path": "timeline/index.html",
"hash": "68e09d8138c8",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T03:02Z"
},
"ev-20261021T0945-6b1675": {
"kind": "event",
"zone": "research",
"title": "Finland's Valtori begins restricting public traffic to government web services (12:45 local).",
"path": "timeline/index.html",
"hash": "2868a785c95f",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T09:45Z"
},
"ev-20261021T1345-91ad21": {
"kind": "event",
"zone": "research",
"title": "NSA Cybersecurity posts on X: 'Effective Immediately ... be prepared for an update addressing two critical vulnerabiliti",
"path": "timeline/index.html",
"hash": "063ff77dc35e",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T13:45Z"
},
"ev-20261021T1404-817557": {
"kind": "event",
"zone": "research",
"title": "CISA releases KEV catalog version 2026.10.21; neither PHP CVE is in it.",
"path": "timeline/index.html",
"hash": "77f0c04ea8fc",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T14:04Z"
},
"ev-20261021T1434-dfbedc": {
"kind": "event",
"zone": "research",
"title": "CISA's ADP assessment on both CVE records: exploitation none, automatable no, technical impact total.",
"path": "timeline/index.html",
"hash": "7a6d1fdd8c74",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T14:34Z"
},
"ev-20261021T1520-66e631": {
"kind": "event",
"zone": "research",
"title": "CERT-EU Security Advisory 2026-018 (stated 15:20:18, timezone not given).",
"path": "timeline/index.html",
"hash": "b02e20cebacb",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T15:20Z"
},
"ev-20261021T1525-a69d02": {
"kind": "event",
"zone": "research",
"title": "NCSC-NL's php2shell README last significant change (17:25 CEST). CERT.LV publishes: Latvia restricts access to several s",
"path": "timeline/index.html",
"hash": "a7d58066ef27",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T15:25Z"
},
"ev-20261021T2000-89432c": {
"kind": "event",
"zone": "research",
"title": "CERT.LV update: the unified state website platform is patched; lsm.lv and 112.lv restored; about 6,000 potentially affec",
"path": "timeline/index.html",
"hash": "14fd2c079eaf",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T20:00Z"
},
"ev-20261021T2015-36ffa5": {
"kind": "event",
"zone": "research",
"title": "NCSC New Zealand: 'aware of reports of active exploitation' (09:15 NZDT 22 October; updated 21:20Z).",
"path": "timeline/index.html",
"hash": "c6c6ed135458",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T20:15Z"
},
"ev-20261022T0043-14b64c": {
"kind": "event",
"zone": "research",
"title": "NSA Cybersecurity posts 'UPDATE: Specific mitigation guidance ... is now available', linking the press release.",
"path": "timeline/index.html",
"hash": "c08667715097",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T00:43Z"
},
"ev-20261022T0520-1f6448": {
"kind": "event",
"zone": "research",
"title": "JVN publishes its note (14:20 JST); JPCERT/CC alert JPCERT-AT-2026-0033 is dated 22 October.",
"path": "timeline/index.html",
"hash": "bda1cf9e8570",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T05:20Z"
},
"ev-20261021T1524-5fdd04": {
"kind": "event",
"zone": "research",
"title": "Aaron Rainbolt relays to oss-security a Fediverse report that the 8.5.12 fix may be incomplete; a Debian maintainer adds",
"path": "timeline/index.html",
"hash": "3bc4eff560a9",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T15:24Z"
},
"ev-20261021T1729-c5d11e": {
"kind": "event",
"zone": "research",
"title": "Per a Matrix channel, Canonical asked PHP about the Fediverse report and was told it is 'unrelated and not a real issue'",
"path": "timeline/index.html",
"hash": "b9796504cb3e",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T17:29Z"
},
"ev-20261021T2030-d5156f": {
"kind": "event",
"zone": "research",
"title": "Huntress: no exploitation observed on partner systems (16:30 ET).",
"path": "timeline/index.html",
"hash": "c897e5d89c4d",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-21T20:30Z"
},
"ev-20261022-2e8bc2": {
"kind": "event",
"zone": "research",
"title": "The Hacker News publishes Amazon's account of the 17 October honeypot attempt and VulnCheck's count of 2,608,039 hosts.",
"path": "timeline/index.html",
"hash": "77fac2563969",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"ev-20261022-43fcfd": {
"kind": "event",
"zone": "research",
"title": "The Register carries Dan Lorenc's reply to the PHP Foundation; Fortinet publishes FortiWeb signatures; The Record carrie",
"path": "timeline/index.html",
"hash": "1ab9bdc16c03",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"ev-20261022T0125-950000": {
"kind": "event",
"zone": "research",
"title": "Matthew Prince posts Cloudflare's attempt counts: thousands before, millions after.",
"path": "timeline/index.html",
"hash": "b6ce5700f91c",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T01:25Z"
},
"ev-20261022T0616-b19846": {
"kind": "event",
"zone": "research",
"title": "BBC News opens its live page: 'Global scramble to fix critical cyber-security flaws as many websites taken offline'.",
"path": "timeline/index.html",
"hash": "cf7e5e391519",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T06:16Z"
},
"ev-20261022T0645-78aaeb": {
"kind": "event",
"zone": "research",
"title": "Greenbone on oss-security: the backports imply versions down to 7.4 are affected, whatever the subject line says.",
"path": "timeline/index.html",
"hash": "60584bf3bb38",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T06:45Z"
},
"ev-20261022T0655-8ac6b7": {
"kind": "event",
"zone": "research",
"title": "The BBC reports the NSA's X post.",
"path": "timeline/index.html",
"hash": "d2ad10b5ad45",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T06:55Z"
},
"ev-20261022T0700-3e281d": {
"kind": "event",
"zone": "research",
"title": "Ryan Austin on BBC Radio 4: no evidence of exploitation yet.",
"path": "timeline/index.html",
"hash": "ec662472fbfa",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T07:00Z"
},
"ev-20261022T0730-40cc86": {
"kind": "event",
"zone": "research",
"title": "The UK NCSC page is modified (HTTP last-modified).",
"path": "timeline/index.html",
"hash": "b10fbbe6cb93",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T07:30Z"
},
"ev-20261022T0840-1a4cdf": {
"kind": "event",
"zone": "research",
"title": "NCSC-NL merges pull request 10; the inventory has 674 entries at commit cca173c64ec5.",
"path": "timeline/index.html",
"hash": "25d3e2542f2d",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:40Z"
},
"ev-20261022T0803-0f3b01": {
"kind": "event",
"zone": "research",
"title": "The evidence vault behind this site is opened; the first capture of the BBC live page is at 08:04:53Z.",
"path": "timeline/index.html",
"hash": "e94fb4f038b1",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:03Z"
},
"src-01net-actualites-failles-php-pourquoi-cest-vra": {
"kind": "source",
"zone": "research",
"title": "01net: Failles PHP : pourquoi c'est un vrai casse-tête pour l'Internet mondial",
"path": "sources/01net-actualites-failles-php-pourquoi-cest-vra/index.html",
"hash": "9aeafbb3ffe2",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-20-minuten-20min-fr-suisse-romande": {
"kind": "source",
"zone": "research",
"title": "20 minutes / 20 Minuten: Faille de sécurité: Panne mondiale: la Suisse romande fortement impactée - 20 minutes",
"path": "sources/20-minuten-20min-fr-suisse-romande/index.html",
"hash": "ff1c87a0b846",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-20min-fr-suisse-romande": {
"kind": "source",
"zone": "research",
"title": "20min.ch: Faille de sécurité: Panne mondiale des sites web: la Suisse romande touchée - 20 minutes",
"path": "sources/20min-fr-suisse-romande/index.html",
"hash": "2800704be2ed",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:14Z"
},
"src-20minutos-tecnologia-ciberseguridad-por-que-gobiernos-hospit": {
"kind": "source",
"zone": "research",
"title": "20Minutos: Alerta de PHP: por qué gobiernos, hospitales y colegios desconectan sus webs",
"path": "sources/20minutos-tecnologia-ciberseguridad-por-que-gobiernos-hospit/index.html",
"hash": "e1cb942582a7",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-24-article-969853-ai-php-70": {
"kind": "source",
"zone": "research",
"title": "موقع 24: كيف لعب الـAI دوراً حاسماً في اكتشاف ثغرة \"PHP\" تهدد 70% من مواقع العالم؟ - موقع 24",
"path": "sources/24-article-969853-ai-php-70/index.html",
"hash": "ed55ba9840ff",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-24heures-php2shell-qui-est-affecte-par-la-faille": {
"kind": "source",
"zone": "research",
"title": "24 Heures: «PHP2Shell»: qui est affecté par la faille en Suisse",
"path": "sources/24heures-php2shell-qui-est-affecte-par-la-faille/index.html",
"hash": "5b06c7db8150",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-2days-22-10-07-109016-it-program": {
"kind": "source",
"zone": "research",
"title": "2days.kr: PHP 보안 취약점 비상, AI 발견 PHP2Shell 워드프레스 서버 패치 - 투데이즈.kr",
"path": "sources/2days-22-10-07-109016-it-program/index.html",
"hash": "5414e6ac2b9f",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-aa-en-science-technology-php-security-crisi": {
"kind": "source",
"zone": "research",
"title": "Anadolu Ajansı: PHP security crisis prompts websites worldwide to push updates for critical vulnerabilities",
"path": "sources/aa-en-science-technology-php-security-crisi/index.html",
"hash": "64f4305509b6",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T12:04Z"
},
"src-abc-au-gov-sites-exposed": {
"kind": "source",
"zone": "research",
"title": "abc.net.au: Australian government sites among those exposed to 'critical' PHP software flaw - ABC News",
"path": "sources/abc-au-gov-sites-exposed/index.html",
"hash": "b6eecf2970f3",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:15Z"
},
"src-abc-au-politics-live": {
"kind": "source",
"zone": "research",
"title": "abc.net.au: Federal politics: No government websites hacked after global security flaw found — as it happened - ABC News",
"path": "sources/abc-au-politics-live/index.html",
"hash": "f93eeb623f54",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:15Z"
},
"src-acn-it-php2shell": {
"kind": "source",
"zone": "research",
"title": "ACN / CSIRT Italia: PHP2Shell: sanate vulnerabilità critiche in PHP (AL07/261021/CSIRT-ITA)",
"path": "sources/acn-it-php2shell/index.html",
"hash": "634eee3d5019",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-acsc-alert-php": {
"kind": "source",
"zone": "research",
"title": "ASD's ACSC (Australia): Critical vulnerabilities in PHP",
"path": "sources/acsc-alert-php/index.html",
"hash": "ceddab3fabe9",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-acsc-home": {
"kind": "source",
"zone": "research",
"title": "ASD's ACSC: cyber.gov.au home",
"path": "sources/acsc-home/index.html",
"hash": "8d1ff76dcc60",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-actainfo-news-php2shell-vulnerabilita-php-allerta": {
"kind": "source",
"zone": "research",
"title": "actainfo: PHP2Shell: allerta NSA, aggiornamenti urgenti siti web - Actainfo",
"path": "sources/actainfo-news-php2shell-vulnerabilita-php-allerta/index.html",
"hash": "30a74cddb2fc",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-actu17-prefectures": {
"kind": "source",
"zone": "research",
"title": "actu17.fr: Failles critiques dans PHP : des sites coupés en urgence dans le monde entier, dont ceux des préfectures en France",
"path": "sources/actu17-prefectures/index.html",
"hash": "1c26eaec69d3",
"v": 2,
"first": "0.10.3",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-actuia-anssi-sites-offline": {
"kind": "source",
"zone": "research",
"title": "ActuIA: PHP flaws: France's ANSSI orders sites offline",
"path": "sources/actuia-anssi-sites-offline/index.html",
"hash": "9ff3a211ff7a",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-addustour-articles-1598648": {
"kind": "source",
"zone": "research",
"title": "جريدة الدستور: «الأمـن السيــبـرانــي» يدعو إلى تحديث «PHP» لمعالجة ثغرتين أمنيتين",
"path": "sources/addustour-articles-1598648/index.html",
"hash": "ecdc8c8b6f83",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T23:25Z"
},
"src-agconnect-maatschappij-security-welke-nederlandse-websites-w": {
"kind": "source",
"zone": "research",
"title": "AG Connect: Offline door PHP kwetsbaarheden: Welke Nederlandse websites waren uit de lucht?",
"path": "sources/agconnect-maatschappij-security-welke-nederlandse-websites-w/index.html",
"hash": "8cbb59c575e3",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-agendadigitale-sicurezza-php2shell-lai-accelera-la-scop": {
"kind": "source",
"zone": "research",
"title": "Agenda Digitale: PHP2Shell, l’AI accelera la scoperta delle falle: rischi per le aziende - Agenda Digitale",
"path": "sources/agendadigitale-sicurezza-php2shell-lai-accelera-la-scop/index.html",
"hash": "91aa84cbb3fc",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-ai4business-intelligenza-artificiale-php2shell-lai-s": {
"kind": "source",
"zone": "research",
"title": "AI4Business: PHP2Shell: l’AI scopre falle critiche in PHP, attacchi già iniziati - AI4Business",
"path": "sources/ai4business-intelligenza-artificiale-php2shell-lai-s/index.html",
"hash": "2b4cac35cfed",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-aimatters-news-report-56697": {
"kind": "source",
"zone": "research",
"title": "AI Matters: 'PHP2Shell' 취약점에 \"딥시크가 원격 패치\" 주장 확산…근거는 확인 안 돼 - AI매터스",
"path": "sources/aimatters-news-report-56697/index.html",
"hash": "6bf563910c17",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T13:34Z"
},
"src-aitnews-2026-10-23-d8-ab-d9-84-d8-a7-d8-ab-d8-a9": {
"kind": "source",
"zone": "research",
"title": "البوابة التقنية: ثلاثة أحرف هزّت الإنترنت.. ما قصة ثغرات PHP التي تهدد المواقع حول العالم؟ | البوابة التقنية",
"path": "sources/aitnews-2026-10-23-d8-ab-d9-84-d8-a7-d8-ab-d8-a9/index.html",
"hash": "84cbfa454344",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T08:03Z"
},
"src-aiweekly-issues-php2shell-millions-of-attacks-15m": {
"kind": "source",
"zone": "research",
"title": "aiweekly: PHP2Shell: Millions of Attacks, 1.5M Servers Unpatched on Day One | AI Weekly",
"path": "sources/aiweekly-issues-php2shell-millions-of-attacks-15m/index.html",
"hash": "939ed5c45ae8",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-akamai-blog-cve-2024-4577-one-day": {
"kind": "source",
"zone": "research",
"title": "Akamai Security Research: CVE-2024-4577 Exploits in the Wild One Day After Disclosure",
"path": "sources/akamai-blog-cve-2024-4577-one-day/index.html",
"hash": "37797b9e6530",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:25Z"
},
"src-akamai-blog-php-core-rce": {
"kind": "source",
"zone": "research",
"title": "Akamai Security Research: Critical Remote Code Execution Vulnerabilities in PHP Core | Akamai",
"path": "sources/akamai-blog-php-core-rce/index.html",
"hash": "7f371f3b35db",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:25Z"
},
"src-albiladpress-news-2026-6586-finance-1027748-html": {
"kind": "source",
"zone": "research",
"title": "جريدة البلاد: جريدة البلاد | “PHP2Shell” تستنفر المصارف.. ثغرات الويب ترفع كلفة الحماية واستمرارية الخدمات",
"path": "sources/albiladpress-news-2026-6586-finance-1027748-html/index.html",
"hash": "d1dd287c47d8",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-alghad-section-225-d8-aa-d9-83-d9-86-d9-88-d9-8": {
"kind": "source",
"zone": "research",
"title": "الغد: ثغرة في PHP تفتح الباب أمام موجة هجمات سيبرانية...",
"path": "sources/alghad-section-225-d8-aa-d9-83-d9-86-d9-88-d9-8/index.html",
"hash": "90821a6fb35a",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T16:05Z"
},
"src-americanbanker-news-banks-dodge-early-damage-from-php2s": {
"kind": "source",
"zone": "research",
"title": "American Banker: Banks dodge early damage from PHP2Shell flaws | American Banker",
"path": "sources/americanbanker-news-banks-dodge-early-damage-from-php2s/index.html",
"hash": "bf6551b7d849",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-24T08:37Z"
},
"src-analyticsinsight-news-changpeng-zhao-warns-crypto-users-a": {
"kind": "source",
"zone": "research",
"title": "Analytics Insight: Changpeng Zhao Warns Crypto Users Amid New PHP2Shell Threats",
"path": "sources/analyticsinsight-news-changpeng-zhao-warns-crypto-users-a/index.html",
"hash": "1624b4062cd1",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T08:03Z"
},
"src-andina-agencia-noticia-peru-y-otros-paises-advi": {
"kind": "source",
"zone": "research",
"title": "Agencia Andina: Perú y otros países advierten de vulnerabilidad en PHP: estos son los riesgos de seguridad | Agencia Andina",
"path": "sources/andina-agencia-noticia-peru-y-otros-paises-advi/index.html",
"hash": "408336d23dee",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-arcticwolf-php2shell-exposure": {
"kind": "source",
"zone": "research",
"title": "Arctic Wolf Labs: Finding, Prioritizing, and Patching PHP2Shell Exposure | Arctic Wolf",
"path": "sources/arcticwolf-php2shell-exposure/index.html",
"hash": "4b235f0fb4e1",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-areacucuta-php2shell-log4shell-a-la-velocidad-de-la": {
"kind": "source",
"zone": "research",
"title": "areacucuta.com: PHP2Shell: vulnerabilidad en PHP amenaza empresas con IA",
"path": "sources/areacucuta-php2shell-log4shell-a-la-velocidad-de-la/index.html",
"hash": "bf7c9ee5fdff",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-armis-php2shell-find-patch": {
"kind": "source",
"zone": "research",
"title": "Armis: Just a moment...",
"path": "sources/armis-php2shell-find-patch/index.html",
"hash": "5d2a287fac3a",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-arstechnica-security-2026-10-php-maintainers-tell-web-devs-to-prepare-th": {
"kind": "source",
"zone": "research",
"title": "Ars Technica: PHP warns it plans to release 2 emergency patches imminently - Ars Technica",
"path": "sources/arstechnica-security-2026-10-php-maintainers-tell-web-devs-to-prepare-th/index.html",
"hash": "10c9959267ff",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-asahi-and-pressrelease-16986349": {
"kind": "source",
"zone": "research",
"title": "朝日新聞デジタル: 「キャンつく」「ヨミトル」PHP重大脆弱性（php2shell）への対応完了のお知らせ | 朝日新聞デジタルマガジン＆[and]",
"path": "sources/asahi-and-pressrelease-16986349/index.html",
"hash": "b684317253b3",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-asiaone-singapore-php-vulnerability-singapore-cy": {
"kind": "source",
"zone": "research",
"title": "AsiaOne.com: Singapore firms urged to act urgently over critical PHP vulnerabilities, Singapore News - AsiaOne",
"path": "sources/asiaone-singapore-php-vulnerability-singapore-cy/index.html",
"hash": "a895154a6b43",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-ask-corp-news-2026-10-synology-php2shell-vulnerab": {
"kind": "source",
"zone": "research",
"title": "株式会社アスク: Synology製品における「PHP2Shell」脆弱性の影響について | 株式会社アスク",
"path": "sources/ask-corp-news-2026-10-synology-php2shell-vulnerab/index.html",
"hash": "9ef28a31e9b7",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-atpress-ne-news-644147": {
"kind": "source",
"zone": "research",
"title": "アットプレス: PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | エレクトロニック・サービス・イニシアチブ有限会社",
"path": "sources/atpress-ne-news-644147/index.html",
"hash": "41c4ad4a1fac",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-aws-security-blog-madpot": {
"kind": "source",
"zone": "research",
"title": "Amazon (CJ Moses, AWS Security Blog): Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot | AW",
"path": "sources/aws-security-blog-madpot/index.html",
"hash": "10e35cbf82f6",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-bangkokbiznews-opinion-1257779": {
"kind": "source",
"zone": "research",
"title": "bangkokbiznews: ช่องโหว่ PHP สะเทือน ความมั่นคงไซเบอร์ (PHP Vulnerabilities Threaten Cybersecurity)",
"path": "sources/bangkokbiznews-opinion-1257779/index.html",
"hash": "d84755d6f2dd",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-bankinfosecurity-attackers-exploit-leaked-zero-day-flaws-in-widely-used-php-a": {
"kind": "source",
"zone": "research",
"title": "BankInfoSecurity: Attackers Exploit Leaked Zero-Day Flaws in Widely Used PHP",
"path": "sources/bankinfosecurity-attackers-exploit-leaked-zero-day-flaws-in-widely-used-php-a/index.html",
"hash": "2ccf4a30731d",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-baogialai-lo-hong-php-do-ai-phat-hien-khien-nhieu": {
"kind": "source",
"zone": "research",
"title": "Báo Gia Lai điện tử: Lỗ hổng PHP do AI phát hiện gây tạm ngưng nhiều website trên thế giới",
"path": "sources/baogialai-lo-hong-php-do-ai-phat-hien-khien-nhieu/index.html",
"hash": "22a6bb8559b8",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-bbc-live-ckgel5xp2xv9t": {
"kind": "source",
"zone": "research",
"title": "BBC News: PHP: Global scramble to fix critical cyber-security flaws as many websites taken offline - follow live",
"path": "sources/bbc-live-ckgel5xp2xv9t/index.html",
"hash": "f7d6d42fa48f",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:05Z"
},
"src-bgonair-a-5-science-434196-kritichna-uyazvimost": {
"kind": "source",
"zone": "research",
"title": "Bgonair: Критична уязвимост в PHP спря правителствени сайтове в Европа - Bgonair",
"path": "sources/bgonair-a-5-science-434196-kritichna-uyazvimost/index.html",
"hash": "0039fd107b89",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-bitpage-php2shell-php-sicherheitsluecke-webseite": {
"kind": "source",
"zone": "research",
"title": "Bitpage.de: PHP2Shell: Wer offline ist, wer gepatcht hat und was zu tun ist - Bitpage.de",
"path": "sources/bitpage-php2shell-php-sicherheitsluecke-webseite/index.html",
"hash": "c7bbb74e0b0d",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-bleepingcomputer-amazon-4-days-before": {
"kind": "source",
"zone": "research",
"title": "BleepingComputer: Amazon says PHP2Shell exploitation began 4 days before patches",
"path": "sources/bleepingcomputer-amazon-4-days-before/index.html",
"hash": "330c02f2d9fc",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-23T01:20Z"
},
"src-bleepingcomputer-php2shell": {
"kind": "source",
"zone": "research",
"title": "bleepingcomputer.com: PHP ships emergency patches for critical PHP2Shell flaws",
"path": "sources/bleepingcomputer-php2shell/index.html",
"hash": "59b6b4aed534",
"v": 2,
"first": "0.10.3",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-bleepingcomputer-wikipedia-ref-12--flaws-emergency-patche": {
"kind": "source",
"zone": "research",
"title": "BleepingComputer: PHP warns admins of two critical flaws, emergency patches coming tomorrow",
"path": "sources/bleepingcomputer-wikipedia-ref-12--flaws-emergency-patche/index.html",
"hash": "de3ae874e5a3",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T11:45Z"
},
"src-blocktempo-openai-php2shell-checker-codex-skill": {
"kind": "source",
"zone": "research",
"title": "動區動趨: OpenAI 開源 php2shell 版本檢查器：Codex 技能一鍵比對 PHP 版本，但「OK」不代表真安全 | 動區動趨-最具影響力的區塊鏈新聞媒體",
"path": "sources/blocktempo-openai-php2shell-checker-codex-skill/index.html",
"hash": "c050c0d88840",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T08:03Z"
},
"src-blog-nouvelles-technologies-389778-php2shell-faille-critique-php-cor": {
"kind": "source",
"zone": "research",
"title": "le Blog des Nouvelles Technologies: PHP2Shell : une faille critique de PHP déclenche l’alerte mondiale",
"path": "sources/blog-nouvelles-technologies-389778-php2shell-faille-critique-php-cor/index.html",
"hash": "bbecea8b5680",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-blogdumoderateur-failles-critiques-php-versions-mettre-a": {
"kind": "source",
"zone": "research",
"title": "BDM: Failles critiques dans PHP : quelles versions mettre à jour et comment protéger ses serveurs",
"path": "sources/blogdumoderateur-failles-critiques-php-versions-mettre-a/index.html",
"hash": "4d2a4fa1432c",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-bloomberg-governments-offline": {
"kind": "source",
"zone": "research",
"title": "Bloomberg: Bloomberg - Are you a robot?",
"path": "sources/bloomberg-governments-offline/index.html",
"hash": "b4434ab0116c",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:26Z"
},
"src-bluewin-de-digital-php-sicherheitsluecke-ondrej": {
"kind": "source",
"zone": "research",
"title": "blue News: PHP2Shell: Wie Ondřej Surý das Internet rettete",
"path": "sources/bluewin-de-digital-php-sicherheitsluecke-ondrej/index.html",
"hash": "01260de9c182",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T13:34Z"
},
"src-boannews-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "boannews: [PHP 파장] “개인정보 유출 우려... DB 접근권한 최소화 시급” < 긴급경보 < 공공·정책 < 기사본문 - 보안뉴스",
"path": "sources/boannews-news-articleview-html/index.html",
"hash": "50d49d214079",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-borncity-blog-2026-10-21-php2shell-php-schwachste": {
"kind": "source",
"zone": "research",
"title": "BornCity: php2shell: PHP-Schwachstellen CVE-2026-109618 und CVE-2026-109619Borns IT- und Windows-Blog",
"path": "sources/borncity-blog-2026-10-21-php2shell-php-schwachste/index.html",
"hash": "3c289d3a252d",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-boursorama-reuters-sites-gouv": {
"kind": "source",
"zone": "research",
"title": "boursorama.com: Des sites gouvernementaux hors service sur fond de failles dans PHP, un correctif critique attendu - 21/10/2026 à 16:44 - Bo",
"path": "sources/boursorama-reuters-sites-gouv/index.html",
"hash": "eda63c8d4caa",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:15Z"
},
"src-broadcom-security-php2shell": {
"kind": "source",
"zone": "research",
"title": "Broadcom (Symantec) Security: PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution | SECURITY.COM",
"path": "sources/broadcom-security-php2shell/index.html",
"hash": "1cbd8316fe2f",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:26Z"
},
"src-btc-echo-news-krypto-boersen-akut-bedroht-kritisc": {
"kind": "source",
"zone": "research",
"title": "BTC-ECHO: Akute Warnung: PHP-Schwachstelle gefährdet Krypto-Dienste",
"path": "sources/btc-echo-news-krypto-boersen-akut-bedroht-kritisc/index.html",
"hash": "75d7f6d8d7ba",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-bursadabugun-haber-php-nedir-php2shell-guvenlik-acigi": {
"kind": "source",
"zone": "research",
"title": "Bursada Bugün: [object Object]",
"path": "sources/bursadabugun-haber-php-nedir-php2shell-guvenlik-acigi/index.html",
"hash": "7a0b9ac71da9",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-bursahakimiyet-teknoloji-php-deki-kritik-guvenlik-acigi-alar": {
"kind": "source",
"zone": "research",
"title": "Bursa Hakimiyet: PHP’deki kritik güvenlik açığı alarmı! Dünya genelinde çok sayıda site erişime kapatıldı - Bursa Hakimiyet",
"path": "sources/bursahakimiyet-teknoloji-php-deki-kritik-guvenlik-acigi-alar/index.html",
"hash": "da717ec18af8",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-cairo24-2516354": {
"kind": "source",
"zone": "research",
"title": "القاهرة 24: الذكاء الاصطناعي يكشف ثغرة خطيرة في PHP تهدد ملايين المواقع على الإنترنت",
"path": "sources/cairo24-2516354/index.html",
"hash": "744a1730cb2b",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-calif-php2shell": {
"kind": "source",
"zone": "research",
"title": "Calif (Calif Research): php2shell by Calif Research — A tale of two PHP remote vulnerabilities",
"path": "sources/calif-php2shell/index.html",
"hash": "e9fd89b59d99",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-canaltech-seguranca-falhas-no-php-chegam-ao-brasil-e-fazem-a": {
"kind": "source",
"zone": "research",
"title": "Canaltech: Falhas no PHP chegam ao Brasil e fazem Anatel e tribunais suspenderem sistemas - Canaltech",
"path": "sources/canaltech-seguranca-falhas-no-php-chegam-ao-brasil-e-fazem-a/index.html",
"hash": "7be826906272",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-cccs-al26-026": {
"kind": "source",
"zone": "research",
"title": "Canadian Centre for Cyber Security (CCCS): AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619",
"path": "sources/cccs-al26-026/index.html",
"hash": "afc1f5282381",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:17Z"
},
"src-cccs-alerts": {
"kind": "source",
"zone": "research",
"title": "CCCS: Alerts and advisories - Canadian Centre for Cyber Security",
"path": "sources/cccs-alerts/index.html",
"hash": "4c6db36d17f6",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-ccn-cert-al-11-26": {
"kind": "source",
"zone": "research",
"title": "CCN-CERT (Spain): CCN-CERT AL 11/26: Actualización inmediata de vulnerabilidad crítica en PHP",
"path": "sources/ccn-cert-al-11-26/index.html",
"hash": "efe7bae238ba",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-ceomagazine-ko-kr-articles-35216": {
"kind": "source",
"zone": "research",
"title": "CEONEWS: [핫이슈] PHP 취약점에 전 세계 비상…한국 정부·기업도 긴급 대응",
"path": "sources/ceomagazine-ko-kr-articles-35216/index.html",
"hash": "2064c686f744",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-certeu-sa-2026-018": {
"kind": "source",
"zone": "research",
"title": "CERT-EU: Security Advisory 2026-018: Critical Vulnerabilities in PHP",
"path": "sources/certeu-sa-2026-018/index.html",
"hash": "1fa923d09aad",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-certfr-2026-ale-014": {
"kind": "source",
"zone": "research",
"title": "CERT-FR (ANSSI): [Màj] Multiples vulnérabilités dans PHP (CERTFR-2026-ALE-014)",
"path": "sources/certfr-2026-ale-014/index.html",
"hash": "8751311e1a2f",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-certlv-php-preventive": {
"kind": "source",
"zone": "research",
"title": "CERT.LV (Latvia): Saistībā ar globāli atklātām PHP ievainojamībām Latvijā ievieš preventīvus pasākumus",
"path": "sources/certlv-php-preventive/index.html",
"hash": "0d5acebac243",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-ch-bacs-warnung-php": {
"kind": "source",
"zone": "research",
"title": "Swiss Federal Office for Cyber Security (BACS / NCSC): Critical vulnerabilities in PHP: Install security updates immediately",
"path": "sources/ch-bacs-warnung-php/index.html",
"hash": "fe4ce8b44dc8",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:17Z"
},
"src-ch-ncsc-home": {
"kind": "source",
"zone": "research",
"title": "Swiss BACS: BACS home",
"path": "sources/ch-ncsc-home/index.html",
"hash": "78bcb858ac02",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-ch-unige-down": {
"kind": "source",
"zone": "research",
"title": "unige.ch: Error 503",
"path": "sources/ch-unige-down/index.html",
"hash": "fc93598422c4",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-channelnewsasia-singapore-php-vulnerabilities-csa-singapore-firms-cybersecur": {
"kind": "source",
"zone": "research",
"title": "CNA (Channel NewsAsia): Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat - CNA",
"path": "sources/channelnewsasia-singapore-php-vulnerabilities-csa-singapore-firms-cybersecur/index.html",
"hash": "48003396f9a8",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-channelpartner-article-4238964-php-sicherheitslucke-err": {
"kind": "source",
"zone": "research",
"title": "ChannelPartner: PHP-Sicherheitslücke erreicht den IT-Channel | ChannelPartner",
"path": "sources/channelpartner-article-4238964-php-sicherheitslucke-err/index.html",
"hash": "d2534deced66",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-chinaz-ainews-31789-shtml": {
"kind": "source",
"zone": "research",
"title": "站长之家: PHP 爆出\"PHP2Shell\"高危漏洞：影响约七成网站，OpenAI 牵头全球协防",
"path": "sources/chinaz-ainews-31789-shtml/index.html",
"hash": "a78f574707a3",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-chip-news-wifi-dsl-internet-bsi-schlaegt-alar": {
"kind": "source",
"zone": "research",
"title": "CHIP: BSI schlägt Alarm: Zwei PHP-Lücken bedrohen Millionen Webseiten - Betreiber müssen handeln - CHIP",
"path": "sources/chip-news-wifi-dsl-internet-bsi-schlaegt-alar/index.html",
"hash": "680be217d89b",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T16:04Z"
},
"src-ciol-iot-india-php2shell-attacks-ai-driven-cy": {
"kind": "source",
"zone": "research",
"title": "CIOL: India Records 14% PHP2Shell Impact Rate, Above Global Average",
"path": "sources/ciol-iot-india-php2shell-attacks-ai-driven-cy/index.html",
"hash": "468baa7e02ed",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-26T12:14Z"
},
"src-cisa-alert-log4j-2021": {
"kind": "source",
"zone": "research",
"title": "CISA: Apache Releases Log4j Version 2.15.0 to Address Critical RCE Vulnerability Under Exploitation | CISA",
"path": "sources/cisa-alert-log4j-2021/index.html",
"hash": "51837337b1af",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:33Z"
},
"src-cisa-alert-php-20261021": {
"kind": "source",
"zone": "research",
"title": "US Cybersecurity and Infrastructure Security Agency (CISA): Critical Vulnerabilities in PHP Require Immediate Patching",
"path": "sources/cisa-alert-php-20261021/index.html",
"hash": "11778f56c36b",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-cisa-ed-22-02-log4j": {
"kind": "source",
"zone": "research",
"title": "CISA: Page Not Found | CISA",
"path": "sources/cisa-ed-22-02-log4j/index.html",
"hash": "bdd889cd0919",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:34Z"
},
"src-cisa-home": {
"kind": "source",
"zone": "research",
"title": "CISA: Home Page | CISA",
"path": "sources/cisa-home/index.html",
"hash": "7b7603f11b48",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-cisa-kev-catalog": {
"kind": "source",
"zone": "research",
"title": "CISA: Known Exploited Vulnerabilities Catalog (JSON feed)",
"path": "sources/cisa-kev-catalog/index.html",
"hash": "68c8df80f8ad",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cisa-kev-json": {
"kind": "source",
"zone": "research",
"title": "CISA: CISA Known Exploited Vulnerabilities catalog (JSON feed)",
"path": "sources/cisa-kev-json/index.html",
"hash": "b1b6f91c6808",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cisco-sa-php-october26": {
"kind": "source",
"zone": "research",
"title": "Cisco: Vulnerabilities in PHP Affecting Cisco Products: October 2026",
"path": "sources/cisco-sa-php-october26/index.html",
"hash": "5ddc9338cd1d",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:17Z"
},
"src-clarin-us-news-php-security-vulnerabilities-how-ai-uncovered-massiv": {
"kind": "source",
"zone": "research",
"title": "Clarin (English edition): PHP security vulnerabilities: How AI uncovered a massive 14-year-old flaw threatening 70% of the internet",
"path": "sources/clarin-us-news-php-security-vulnerabilities-how-ai-uncovered-massiv/index.html",
"hash": "96a579ea8541",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-clickx-fr-actualites-200877-des-failles-php-critiques-menace": {
"kind": "source",
"zone": "research",
"title": "www.clickx.be: Des failles PHP critiques menacent les sites web du monde entier : DPG Media et les pouvoirs publics mettent leurs sites hors",
"path": "sources/clickx-fr-actualites-200877-des-failles-php-critiques-menace/index.html",
"hash": "072736da09e1",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-cloudflare-blog-php2shell-waf": {
"kind": "source",
"zone": "research",
"title": "Cloudflare: Cloudflare deploys protections against php2shell vulnerability",
"path": "sources/cloudflare-blog-php2shell-waf/index.html",
"hash": "b4d4b0cc9f27",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-cloudlinux-wikipedia-ref-17-php-cve-2026-109618-and": {
"kind": "source",
"zone": "research",
"title": "CloudLinux: PHP CVE-2026-109618 and CVE-2026-109619: CloudLinux Package Status and Imunify360 Protection",
"path": "sources/cloudlinux-wikipedia-ref-17-php-cve-2026-109618-and/index.html",
"hash": "f694cef0bfac",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T11:45Z"
},
"src-clubic-actualite-635179-deux-failles-critiques": {
"kind": "source",
"zone": "research",
"title": "Clubic: Deux failles critiques menacent des millions de sites PHP, une mise à jour d’urgence arrive ce mercredi après-midi",
"path": "sources/clubic-actualite-635179-deux-failles-critiques/index.html",
"hash": "03f1f8670446",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T08:37Z"
},
"src-cnbcindonesia-tech-20261022094711-37-778474-patch-php2": {
"kind": "source",
"zone": "research",
"title": "CNBC Indonesia: Patch PHP2Shell Sudah Terbit, Ini Versi Aman dan Cara Update",
"path": "sources/cnbcindonesia-tech-20261022094711-37-778474-patch-php2/index.html",
"hash": "000780379d3a",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-cnbctv18-technology-india-ranks-11th-among-18-cou": {
"kind": "source",
"zone": "research",
"title": "CNBCTV18: India ranks 11th among 18 countries most affected by PHP2Shell attacks: Check Point Research - CNBC TV18",
"path": "sources/cnbctv18-technology-india-ranks-11th-among-18-cou/index.html",
"hash": "b5fde6527f23",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T23:25Z"
},
"src-cncs-pt-alerta-136114": {
"kind": "source",
"zone": "research",
"title": "CNCS (Portugal): Alerta de Vulnerabilidade PHP (CNCS)",
"path": "sources/cncs-pt-alerta-136114/index.html",
"hash": "e0e0e2c58729",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-cnn-php2shell-ai": {
"kind": "source",
"zone": "research",
"title": "cnn.com: PHP2Shell: AI helped find a critical security flaw affecting 70% of the internet | CNN Business",
"path": "sources/cnn-php2shell-ai/index.html",
"hash": "bf7ad8f56a9a",
"v": 2,
"first": "0.10.3",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-cnn-php2shell-websites-shut": {
"kind": "source",
"zone": "research",
"title": "CNN: Websites shut down globally after AI finds a critical flaw affecting 70% of the internet | CNN Business",
"path": "sources/cnn-php2shell-websites-shut/index.html",
"hash": "0762efa921f2",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-cnn-wikipedia-ref-39-26-10-21-tech-php2shell": {
"kind": "source",
"zone": "research",
"title": "CNN: Websites shut down globally after AI finds cybersecurity flaw affecting 70% of the internet | CNN Business",
"path": "sources/cnn-wikipedia-ref-39-26-10-21-tech-php2shell/index.html",
"hash": "af410e3f9de1",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T11:45Z"
},
"src-cnnportugal-php": {
"kind": "source",
"zone": "research",
"title": "cnnportugal.iol.pt: \"Um dos incidentes mais impactantes da memória recente\": o que se está a passar na Internet? - CNN Portugal",
"path": "sources/cnnportugal-php/index.html",
"hash": "d897834bb2ab",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:15Z"
},
"src-coinacademy-actu-php-php2shell-frailles-critiques-ur": {
"kind": "source",
"zone": "research",
"title": "Coin Academy: PHP2Shell : deux failles critiques PHP corrigées en urgence",
"path": "sources/coinacademy-actu-php-php2shell-frailles-critiques-ur/index.html",
"hash": "04ea17414b01",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-coingape-crypto-firms-say-they-dont-use-php-after": {
"kind": "source",
"zone": "research",
"title": "Coingape: Crypto Firms Say They Don't Use PHP After Critical PHP2Shell Flaw",
"path": "sources/coingape-crypto-firms-say-they-dont-use-php-after/index.html",
"hash": "e34102231ed1",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-coinpedia-crypto-live-news-php-flags-third-unpatch": {
"kind": "source",
"zone": "research",
"title": "Coinpedia: PHP Flags Third Unpatched Flaw As Attacks On PHP2Shell Bugs Reach Millions",
"path": "sources/coinpedia-crypto-live-news-php-flags-third-unpatch/index.html",
"hash": "f73cb1ebcea9",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T08:37Z"
},
"src-cointelegraph-news-php-foundation-admits-structural-failure": {
"kind": "source",
"zone": "research",
"title": "Cointelegraph Brasil: Fundação PHP admite que “falha estrutural” atrasou correção de segurança",
"path": "sources/cointelegraph-news-php-foundation-admits-structural-failure/index.html",
"hash": "a750f6024cca",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-computable-2026-10-21-kritiek-php-lek-zet-miljoenen": {
"kind": "source",
"zone": "research",
"title": "Computable.be: Kritiek PHP-lek zet miljoenen websites onder druk - Computable.be",
"path": "sources/computable-2026-10-21-kritiek-php-lek-zet-miljoenen/index.html",
"hash": "0a7466a80bd7",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-computable-2026-10-21-kritiek-php-lek-zet-miljoenen-20261023": {
"kind": "source",
"zone": "research",
"title": "Computable.nl: Kritiek PHP-lek zet miljoenen websites onder druk - Computable.nl",
"path": "sources/computable-2026-10-21-kritiek-php-lek-zet-miljoenen-20261023/index.html",
"hash": "51fc3bd2c6e1",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-computerhoy-20minutos-ciberseguridad-que-es-php-php2shell-cual": {
"kind": "source",
"zone": "research",
"title": "computerhoy.20minutos: Qué es PHP y PHP2Shell, cuál es el papel de la IA en todo esto y cuánto tiempo tardará en solucionarse una de las may",
"path": "sources/computerhoy-20minutos-ciberseguridad-que-es-php-php2shell-cual/index.html",
"hash": "ef693b6c9447",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T08:37Z"
},
"src-computerweekly-news-366652674-botched-php2shell-disclos": {
"kind": "source",
"zone": "research",
"title": "Computer Weekly: Botched PHP2Shell disclosure revealed as panic continues | Computer Weekly",
"path": "sources/computerweekly-news-366652674-botched-php2shell-disclos/index.html",
"hash": "d03329f0e495",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-computerworld-article-4238887-dos-fallos-criticos-de-p": {
"kind": "source",
"zone": "research",
"title": "COMPUTERWORLD ESPAÑA: Dos fallos críticos de PHP ponen en alerta a Internet | Computerworld.es",
"path": "sources/computerworld-article-4238887-dos-fallos-criticos-de-p/index.html",
"hash": "ad93a336e49a",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-computing-news-2026-security-php-emergency-patches": {
"kind": "source",
"zone": "research",
"title": "Computing: PHP rushes out emergency fixes for critical flaws threatening millions of websites",
"path": "sources/computing-news-2026-security-php-emergency-patches/index.html",
"hash": "f526a59a0f13",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-cpomagazine-cyber-security-threat-actor-targeted-php": {
"kind": "source",
"zone": "research",
"title": "CPO Magazine: Threat Actor Targeted PHP Vulnerabilities Days Before PHP2Shell Disclosure - CPO Magazine",
"path": "sources/cpomagazine-cyber-security-threat-actor-targeted-php/index.html",
"hash": "9c2634553de3",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-26T14:42Z"
},
"src-criticarad-php2shell-cve-2026-109618-ghid-patch": {
"kind": "source",
"zone": "research",
"title": "Critic Arad: PHP2Shell | Panică mondială și ghidul complet de patch",
"path": "sources/criticarad-php2shell-cve-2026-109618-ghid-patch/index.html",
"hash": "c9c8e56672da",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-crn-news-security-2026-5-things-to-know-about-critical-php-vulne": {
"kind": "source",
"zone": "research",
"title": "CRN: 5 Things To Know About ‘Critical’ PHP Vulnerabilities Exploitation",
"path": "sources/crn-news-security-2026-5-things-to-know-about-critical-php-vulne/index.html",
"hash": "263571f8f89c",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-cryptoast-failles-critiques-php-php2shell-france-f": {
"kind": "source",
"zone": "research",
"title": "Cryptoast: Faille php : 60% des sites impactés et la France en première ligne, que faire et faut-il s’inquiéter ?",
"path": "sources/cryptoast-failles-critiques-php-php2shell-france-f/index.html",
"hash": "75d836eefe6e",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-cryptoid-ciberseguranca-seguranca-da-informacao-i": {
"kind": "source",
"zone": "research",
"title": "CRYPTO ID: Imperva Threat Research analisa falhas críticas do PHP2Shell",
"path": "sources/cryptoid-ciberseguranca-seguranca-da-informacao-i/index.html",
"hash": "a5d10fe52bf5",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-cumhuriyet-bilim-teknoloji-php-kaynakli-kritik-guve": {
"kind": "source",
"zone": "research",
"title": "Cumhuriyet: PHP kaynaklı kritik güvenlik açığı: Avrupa'da devlet, okul ve hastanelerin internet siteleri erişime kapatıldı - Son Dakika Bili",
"path": "sources/cumhuriyet-bilim-teknoloji-php-kaynakli-kritik-guve/index.html",
"hash": "c0f6cd018f73",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-cve-cve-2008-1447": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2008-1447 (DNS cache poisoning, Kaminsky)",
"path": "sources/cve-cve-2008-1447/index.html",
"hash": "569811d12bd6",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2012-1823": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2012-1823 (php-cgi query string)",
"path": "sources/cve-cve-2012-1823/index.html",
"hash": "d65447364d20",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2014-0160": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2014-0160 (Heartbleed)",
"path": "sources/cve-cve-2014-0160/index.html",
"hash": "87a7f2c2787e",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2014-6271": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2014-6271 (Shellshock)",
"path": "sources/cve-cve-2014-6271/index.html",
"hash": "31e042a24144",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2017-5638": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2017-5638 (Apache Struts)",
"path": "sources/cve-cve-2017-5638/index.html",
"hash": "9ffbcf522b79",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2019-11043": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2019-11043 (PHP-FPM underflow)",
"path": "sources/cve-cve-2019-11043/index.html",
"hash": "c8704eefd945",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2021-44228": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2021-44228 (Log4Shell)",
"path": "sources/cve-cve-2021-44228/index.html",
"hash": "ff12b459bcc0",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2022-22965": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2022-22965 (Spring4Shell)",
"path": "sources/cve-cve-2022-22965/index.html",
"hash": "747e8936e286",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2023-34362": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2023-34362 (MOVEit Transfer)",
"path": "sources/cve-cve-2023-34362/index.html",
"hash": "ff659bdfe873",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2024-4577": {
"kind": "source",
"zone": "research",
"title": "CVE Program (cveawg API): CVE-2024-4577 (PHP-CGI argument injection)",
"path": "sources/cve-cve-2024-4577/index.html",
"hash": "e5038cae8777",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-cve-cve-2026-109618": {
"kind": "source",
"zone": "research",
"title": "CVE Program (CNA: PHP Group): CVE-2026-109618: RCE via OOM corruption",
"path": "sources/cve-cve-2026-109618/index.html",
"hash": "5311d3e01f1d",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:12Z"
},
"src-cve-cve-2026-109619": {
"kind": "source",
"zone": "research",
"title": "CVE Program (CNA: PHP Group): CVE-2026-109619: RCE via stale global state",
"path": "sources/cve-cve-2026-109619/index.html",
"hash": "9247bb8debde",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:12Z"
},
"src-cybelangel-php2shell": {
"kind": "source",
"zone": "research",
"title": "CybelAngel: What We Know About php2shell [Critical update]",
"path": "sources/cybelangel-php2shell/index.html",
"hash": "28f84fa2c433",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-cyber-gov-au-site": {
"kind": "source",
"zone": "research",
"title": "cyber.gov.au: cyber-gov-au-site",
"path": "sources/cyber-gov-au-site/index.html",
"hash": "1ae134b216e7",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-cyberdaily-security-14335-php2shell-do-you-know-whe": {
"kind": "source",
"zone": "research",
"title": "Cyber Daily: PHP2Shell: Do you know where all your servers are? - Cyber Daily",
"path": "sources/cyberdaily-security-14335-php2shell-do-you-know-whe/index.html",
"hash": "24214e17beda",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T08:03Z"
},
"src-cyberexpress-php2shell-gov-sites": {
"kind": "source",
"zone": "research",
"title": "The Cyber Express: PHP2Shell CVE-2026-109618 PHP Flaw Hits Gov Sites",
"path": "sources/cyberexpress-php2shell-gov-sites/index.html",
"hash": "1820747b3ade",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-cyberkendra-2026-10-php2shell-cve-2026-109618-cve-20": {
"kind": "source",
"zone": "research",
"title": "cyberkendra.com: PHP2Shell: Critical PHP Flaws Allow Remote Code Execution - Cyber Kendra",
"path": "sources/cyberkendra-2026-10-php2shell-cve-2026-109618-cve-20/index.html",
"hash": "ec3120cf5c4b",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T08:03Z"
},
"src-cybernews-php2shell-millions": {
"kind": "source",
"zone": "research",
"title": "Cybernews: PHP2Shell exploit attempts hit millions, Amazon and Cloudflare warn | Cybernews",
"path": "sources/cybernews-php2shell-millions/index.html",
"hash": "3cd9e05cfc2e",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-cyberpress-php2shell-exploits-predate-patches": {
"kind": "source",
"zone": "research",
"title": "Cyber Press: Attackers Were Already Testing PHP2Shell Exploits Before Security Patches Arrived",
"path": "sources/cyberpress-php2shell-exploits-predate-patches/index.html",
"hash": "94f49fdeba91",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T08:03Z"
},
"src-cyberscoop-php-emergency-patches-php2shell-vulnerab": {
"kind": "source",
"zone": "research",
"title": "CyberScoop: PHP releases emergency fixes for 2 critical vulnerabilities | CyberScoop",
"path": "sources/cyberscoop-php-emergency-patches-php2shell-vulnerab/index.html",
"hash": "d1b82ba43d97",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-cybersecitalia-lalert-dellacn-in-italia-a-rischio-vulne": {
"kind": "source",
"zone": "research",
"title": "cybersecitalia: PHP2Shell, alert di ACN: \"Aggiornare subito, l'ha fatto solo il 18%\"",
"path": "sources/cybersecitalia-lalert-dellacn-in-italia-a-rischio-vulne/index.html",
"hash": "90eb5c6f85b4",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-cybersecurity360-nuove-minacce-php2shell-due-vulnerabilit": {
"kind": "source",
"zone": "research",
"title": "Cyber Security 360: PHP2Shell: due vulnerabilità critiche in PHP, cosa fare",
"path": "sources/cybersecurity360-nuove-minacce-php2shell-due-vulnerabilit/index.html",
"hash": "826c24d7001f",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-cybersecuritynews-critical-php2shell-exploit-code": {
"kind": "source",
"zone": "research",
"title": "Cyber Security News: Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware",
"path": "sources/cybersecuritynews-critical-php2shell-exploit-code/index.html",
"hash": "0b323e42520e",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-dailynews-news-6303237": {
"kind": "source",
"zone": "research",
"title": "เดลินิวส์: “อ.นพดล” เตือนภัยไซเบอร์ “PHP2Shell” จี้รัฐอุดช่องโหว่เสี่ยงกระทบเว็บไซต์-แอปฯ | เดลินิวส์",
"path": "sources/dailynews-news-6303237/index.html",
"hash": "75ea68782202",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T12:04Z"
},
"src-dailysecu-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "데일리시큐: [긴급] PHP2Shell 취약점에 웹서버 보안 비상…긴급 설정 점검과 업데이트 필수 < 긴급속보 < 이슈 < 기사본문 - 데일리시큐",
"path": "sources/dailysecu-news-articleview-html/index.html",
"hash": "8266b58dfa25",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-dantri-cong-nghe-doanh-nghiep-can-lam-gi-de-bao": {
"kind": "source",
"zone": "research",
"title": "Báo Dân trí: Doanh nghiệp cần làm gì để bảo vệ trang web trước lỗ hổng PHP? | Báo Dân trí",
"path": "sources/dantri-cong-nghe-doanh-nghiep-can-lam-gi-de-bao/index.html",
"hash": "2a9b75e2831f",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T08:37Z"
},
"src-darkreading-php2shell-red-alert": {
"kind": "source",
"zone": "research",
"title": "Dark Reading: 'PHP2Shell' Bugs Signal Red Alert for Security Industry",
"path": "sources/darkreading-php2shell-red-alert/index.html",
"hash": "c7a88c51514d",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-data-max-article-87622": {
"kind": "source",
"zone": "research",
"title": "データ・マックス: PHPの重大な脆弱性「PHP2Shell」とは何か～誰でもわかる解説と、これから起こりうること（前）｜NetIB-News",
"path": "sources/data-max-article-87622/index.html",
"hash": "af67e56a0706",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-datensicherheit-php2shell-informationen-patch-veroeffent": {
"kind": "source",
"zone": "research",
"title": "datensicherheit.de: php2shell: Informationen zu PHP-Lücken vor Patch-Veröffentlichung offengelegt | datensicherheit.de",
"path": "sources/datensicherheit-php2shell-informationen-patch-veroeffent/index.html",
"hash": "8400622c26ad",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-daubois-blog-php2shell-rumors": {
"kind": "source",
"zone": "research",
"title": "Alexandre Daubois (PHP security team / PHP Foundation): What the PHP2Shell rumors got wrong, from inside the PHP security team",
"path": "sources/daubois-blog-php2shell-rumors/index.html",
"hash": "ba2b4c6c4389",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-defesaemfoco-php2shell-falhas-gravidade-92-ameacam-se": {
"kind": "source",
"zone": "research",
"title": "Defesa em Foco: PHP2Shell: falhas de gravidade 9,2 ameaçam servidores na internet",
"path": "sources/defesaemfoco-php2shell-falhas-gravidade-92-ameacam-se/index.html",
"hash": "fd7575ca71cc",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T08:37Z"
},
"src-delfi-bizness-44467736-tehnologijas-120139480-certlv-novero": {
"kind": "source",
"zone": "research",
"title": "DELFI: \"Cert.lv\" novēro mēģinājumus izmantot PHP ievainojamības kiberuzbrukumos; pagaidām uzbrukumi nesekmīgi",
"path": "sources/delfi-bizness-44467736-tehnologijas-120139480-certlv-novero/index.html",
"hash": "369d503fa4c8",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-denews-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "디지털경제뉴스: 로그프레소, PHP 원격 코드 실행 취약점 진단 ‘PHP2Shell 스캐너’ 앱 공개 < IT&과학 < 기사본문 - 디지털경제뉴스",
"path": "sources/denews-news-articleview-html/index.html",
"hash": "9c8ddf55e5b6",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-detik-tag-php2shell": {
"kind": "source",
"zone": "research",
"title": "detikcom: Berita dan Informasi Php2shell Terkini dan Terbaru Hari ini - detikcom",
"path": "sources/detik-tag-php2shell/index.html",
"hash": "62fa652df1d9",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-dexpose-php2shell-php-rce-exposure-response": {
"kind": "source",
"zone": "research",
"title": "dexpose.io: PHP2Shell: How Security Teams Should Assess and Contain the Reported PHP RCEs - DeXpose",
"path": "sources/dexpose-php2shell-php-rce-exposure-response/index.html",
"hash": "c11408ada743",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T07:05Z"
},
"src-diariobitcoin-tecnologia-aws-detecto-un-intento-de-exp": {
"kind": "source",
"zone": "research",
"title": "DiarioBitcoin: AWS detectó un intento de explotar PHP2Shell cuatro días antes de su divulgación - DiarioBitcoin",
"path": "sources/diariobitcoin-tecnologia-aws-detecto-un-intento-de-exp/index.html",
"hash": "6dd942de72fa",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-diepresse-41383717-die-php-sicherheitsluecke-ist-a": {
"kind": "source",
"zone": "research",
"title": "Die Presse: Die PHP-Sicherheitslücke ist alt, die KI hat sie wieder ausgegraben, was sie genau ist und was noch kommt – DiePresse.com",
"path": "sources/diepresse-41383717-die-php-sicherheitsluecke-ist-a/index.html",
"hash": "31f371f81604",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-digitalpr-r-146712": {
"kind": "source",
"zone": "research",
"title": "デジタルPRプラットフォーム: PHPの重大な脆弱性「PHP2shell」とは？ 企業サイトが今すぐ確認すべきこと　WACAが解説記事を公開 | 一般社団法人ウェブ解析士協会",
"path": "sources/digitalpr-r-146712/index.html",
"hash": "92f4479ba981",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-digitaltoday-cn-view-118322-stealien-launches-free-ph": {
"kind": "source",
"zone": "research",
"title": "DigitalToday: Stealien推出“PHP2Shell”免费在线检测服务",
"path": "sources/digitaltoday-cn-view-118322-stealien-launches-free-ph/index.html",
"hash": "9088adb3b37c",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-distributique-actualites-lire-php-des-failles-critique": {
"kind": "source",
"zone": "research",
"title": "Distributique: PHP : des failles critiques mettent des milliers de sites sous pression - Distributique",
"path": "sources/distributique-actualites-lire-php-des-failles-critique/index.html",
"hash": "ad7d889ee3b8",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T12:04Z"
},
"src-donanimhaber-php-acigindan-etkilenen-ulkeler-ve-sitel": {
"kind": "source",
"zone": "research",
"title": "DonanımHaber: PHP açığından etkilenen ülkeler ve siteler açıklandı: İşte liste | DonanımHaber",
"path": "sources/donanimhaber-php-acigindan-etkilenen-ulkeler-ve-sitel/index.html",
"hash": "fb4700e4929f",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-donews-news-detail-8-6750596-html": {
"kind": "source",
"zone": "research",
"title": "DoNews: PHP曝出代号PHP2Shell高危漏洞- DoNews快讯",
"path": "sources/donews-news-detail-8-6750596-html/index.html",
"hash": "5cb87039cb7b",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T23:25Z"
},
"src-dutchitleaders-websites-offline": {
"kind": "source",
"zone": "research",
"title": "Dutch IT Leaders: Just a moment...",
"path": "sources/dutchitleaders-websites-offline/index.html",
"hash": "d0cc0f58b0cc",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:27Z"
},
"src-eadt-minister-budget-no-breach": {
"kind": "source",
"zone": "research",
"title": "East Anglian Daily Times (PA): No breach of Budget security after critical flaw found in PHP, minister says | East Anglian Daily Times",
"path": "sources/eadt-minister-budget-no-breach/index.html",
"hash": "33bbd30915bf",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-ebn-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "www.ebn.co.kr: PHP 취약점 악용한 대규모 사이버 공격 정황...北 라자루스 연계 가능성 < 정치/사회 < 기사본문 - 이비엔(EBN)뉴스센터",
"path": "sources/ebn-news-articleview-html/index.html",
"hash": "32d667a62634",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T13:34Z"
},
"src-economedia-zitec-vulnerabilitatile-in-php-sunt-ampl": {
"kind": "source",
"zone": "research",
"title": "Economedia: Zitec: Vulnerabilitățile în PHP sunt amplificate de inteligența artificială",
"path": "sources/economedia-zitec-vulnerabilitatile-in-php-sunt-ampl/index.html",
"hash": "8b6660871382",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-economictimes-indiatimes-tech-technology-what-is-the-php-security": {
"kind": "source",
"zone": "research",
"title": "The Economic Times: What is the PHP security vulnerability: The AI-found bug that made governments take websites offline - The Economic Time",
"path": "sources/economictimes-indiatimes-tech-technology-what-is-the-php-security/index.html",
"hash": "0bb3235a47a7",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-edinburgh-council-site": {
"kind": "source",
"zone": "research",
"title": "edinburgh.gov.uk: Home – The City of Edinburgh Council",
"path": "sources/edinburgh-council-site/index.html",
"hash": "78bd89200ffa",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-edinburghnews-council-offline": {
"kind": "source",
"zone": "research",
"title": "edinburghnews.scotsman.com: Edinburgh council website offline as operators race to patch critical vulnerability",
"path": "sources/edinburghnews-council-offline/index.html",
"hash": "10d3623f5305",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:11Z"
},
"src-eldebate-tecnologia-20261022-php2shell-vulnerabil": {
"kind": "source",
"zone": "research",
"title": "El Debate: PHP2Shell: la vulnerabilidad masiva descubierta por IA que amenaza al 70 % de las páginas web del mundo",
"path": "sources/eldebate-tecnologia-20261022-php2shell-vulnerabil/index.html",
"hash": "2ad787233694",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-elmundo-economia-2026-10-21-6ad92780fc6c83a57e8b": {
"kind": "source",
"zone": "research",
"title": "EL MUNDO: Así es PHP2Shell, el fallo que amenaza a siete de cada diez webs | Actualidad Económica",
"path": "sources/elmundo-economia-2026-10-21-6ad92780fc6c83a57e8b/index.html",
"hash": "b187e91baaf7",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-elobservador-ciencia-y-tecnologia-sitios-del-estado-c": {
"kind": "source",
"zone": "research",
"title": "El Observador: Sitios del Estado caídos y miles de servidores expuestos: el impacto en Uruguay de la falla de PHP",
"path": "sources/elobservador-ciencia-y-tecnologia-sitios-del-estado-c/index.html",
"hash": "34a7cf7fcb3b",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T23:25Z"
},
"src-elotrolado-noticias-internet-php2shell-seguridad-cv": {
"kind": "source",
"zone": "research",
"title": "ElOtroLado.net: Dos vulnerabilidades críticas en PHP afectan al 70 % de Internet",
"path": "sources/elotrolado-noticias-internet-php2shell-seguridad-cv/index.html",
"hash": "a5812d1874e8",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-emarketerz-faille-majeure-dans-php-que-revele-la-vu": {
"kind": "source",
"zone": "research",
"title": "EmarketerZ: Faille majeure dans PHP : Que révèle la vulnérabilité PHP2Shell ?",
"path": "sources/emarketerz-faille-majeure-dans-php-que-revele-la-vu/index.html",
"hash": "6608e2374c58",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T08:03Z"
},
"src-encause-failles-php-critiques-php2shell-mise-a-j": {
"kind": "source",
"zone": "research",
"title": "En cause: Failles PHP critiques : versions corrigées à installer",
"path": "sources/encause-failles-php-critiques-php2shell-mise-a-j/index.html",
"hash": "464246d5733c",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-enisa-cnw-2026-04-php": {
"kind": "source",
"zone": "research",
"title": "ENISA / EU CSIRTs Network (CNW): CSIRTs Network - php2shell (CNW-2026-04)",
"path": "sources/enisa-cnw-2026-04-php/index.html",
"hash": "2d5c207741f7",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-epfl-site": {
"kind": "source",
"zone": "research",
"title": "epfl.ch: EPFL",
"path": "sources/epfl-site/index.html",
"hash": "845950e6454d",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-equixly-php2shell-what-we-know": {
"kind": "source",
"zone": "research",
"title": "Equixly: CVE-2026-109618 and CVE-2026-109619: What we know about PHP2Shell and how to prepare | Equixly",
"path": "sources/equixly-php2shell-what-we-know/index.html",
"hash": "036edbecb0a1",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:28Z"
},
"src-es-wired-articulos-hackers-aprovecharon-las-vulne": {
"kind": "source",
"zone": "research",
"title": "WIRED en Español: Hackers aprovecharon las vulnerabilidades de PHP días antes de que se corrigieran | WIRED",
"path": "sources/es-wired-articulos-hackers-aprovecharon-las-vulne/index.html",
"hash": "d83c8242939b",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T13:34Z"
},
"src-estadao-tecmundo-ciberseguranca-brecha-no-php-ja": {
"kind": "source",
"zone": "research",
"title": "Estadão: Brecha no PHP já gerou milhões de tentativas de exploração, diz CEO da Cloudflare - Estadão",
"path": "sources/estadao-tecmundo-ciberseguranca-brecha-no-php-ja/index.html",
"hash": "7a7fcaf0ec4a",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T08:37Z"
},
"src-estrelladigital-articulo-ciberseguridad-llave-maestra-in": {
"kind": "source",
"zone": "research",
"title": "Estrella Digital: La llave maestra de internet: así se rompió el secreto de PHP2Shell",
"path": "sources/estrelladigital-articulo-ciberseguridad-llave-maestra-in/index.html",
"hash": "4de22e722b2e",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-24T08:37Z"
},
"src-etnews-20261023000089": {
"kind": "source",
"zone": "research",
"title": "전자신문: 엔키화이트햇, 'PHP2Shell' 취약점 무료 진단 도구 공개 - 전자신문",
"path": "sources/etnews-20261023000089/index.html",
"hash": "396a0d6ca1f5",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-europapress-portaltic-ciberseguridad-noticia-amazon": {
"kind": "source",
"zone": "research",
"title": "Europa Press: Amazon detectó intentos de explotación de PHP2Shell días antes de que se divulgaran las vulnerabilidades y su parche",
"path": "sources/europapress-portaltic-ciberseguridad-noticia-amazon/index.html",
"hash": "d04e9ac41bea",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T23:25Z"
},
"src-expresscomputer-guest-blogs-understanding-php2shell-vuln": {
"kind": "source",
"zone": "research",
"title": "expresscomputer: Understanding PHP2Shell vulnerabilities and reducing risk while you patch - Express Computer",
"path": "sources/expresscomputer-guest-blogs-understanding-php2shell-vuln/index.html",
"hash": "58c73c909dbd",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T11:04Z"
},
"src-fastly-blog-php2shell": {
"kind": "source",
"zone": "research",
"title": "Fastly: Fastly’s Proactive Protection for PHP2Shell, Critical PHP RCE CVE-2026-109618 and CVE-2026-109619 | Fastly",
"path": "sources/fastly-blog-php2shell/index.html",
"hash": "d6b919e878ba",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-faz-aktuell-wirtschaft-mehr-wirtschaft-php-s": {
"kind": "source",
"zone": "research",
"title": "FAZ: PHP-Sicherheitslücken: Die wichtigsten Fragen und Antworten | FAZ",
"path": "sources/faz-aktuell-wirtschaft-mehr-wirtschaft-php-s/index.html",
"hash": "f399610cc570",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T23:25Z"
},
"src-feuerwehrmagazin-nachrichten-dfv-warnt-vor-kritischen-php": {
"kind": "source",
"zone": "research",
"title": "Feuerwehr-Magazin: PHP2Shell: DFV warnt Feuerwehren vor kritischen PHP-Sicherheitslücken",
"path": "sources/feuerwehrmagazin-nachrichten-dfv-warnt-vor-kritischen-php/index.html",
"hash": "f850fe481a08",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-fi-valtori": {
"kind": "source",
"zone": "research",
"title": "valtori.fi: fi-valtori",
"path": "sources/fi-valtori/index.html",
"hash": "664b9e33a4eb",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-finance-sina-tech-roll-2026-10-22-doc-iniwcaff5189430": {
"kind": "source",
"zone": "research",
"title": "新浪财经: OpenAI 发现 PHP「世纪漏洞」，全球 70% 网站都危险了_新浪科技_新浪网",
"path": "sources/finance-sina-tech-roll-2026-10-22-doc-iniwcaff5189430/index.html",
"hash": "cd21e4a62617",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-finance-yahoo-technology-articles-php-patches-critical": {
"kind": "source",
"zone": "research",
"title": "Yahoo Finance: PHP patches critical flaw hitting 70% of websites; Cloudflare, others surge",
"path": "sources/finance-yahoo-technology-articles-php-patches-critical/index.html",
"hash": "85ab6db0e7c6",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-financiarul-tehnologie-vulnerabilitatea-php-este-viz": {
"kind": "source",
"zone": "research",
"title": "Financiarul: Vulnerabilitatea PHP este vizată de milioane de accesări. Autorități europene au oprit preventiv site-uri",
"path": "sources/financiarul-tehnologie-vulnerabilitatea-php-este-viz/index.html",
"hash": "1a52b38d9ac1",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-fnnews-news-202610230856366360": {
"kind": "source",
"zone": "research",
"title": "파이낸셜뉴스: \"우리 홈페이지도 위험할까\"…파이오링크, PHP 취약점 점검 페이지 공개 - 파이낸셜뉴스",
"path": "sources/fnnews-news-202610230856366360/index.html",
"hash": "694262d01646",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T23:25Z"
},
"src-forbes-teknoloji-yapay-zekayla-kesfedildi-php-g": {
"kind": "source",
"zone": "research",
"title": "Forbes Türkiye: Yapay zekayla keşfedildi: PHP güvenlik açığı neden önemli? - Forbes Türkiye",
"path": "sources/forbes-teknoloji-yapay-zekayla-kesfedildi-php-g/index.html",
"hash": "5db95695ff8b",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T13:34Z"
},
"src-forest-watch-impress-docs-news-2150167-html": {
"kind": "source",
"zone": "research",
"title": "窓の杜: 「PHP」の“致命的”な脆弱性2件が修正、ただちにアップデートを - 窓の杜",
"path": "sources/forest-watch-impress-docs-news-2150167-html/index.html",
"hash": "100215b95355",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-fortinet-fg-ir-26-186": {
"kind": "source",
"zone": "research",
"title": "Fortinet: PSIRT | FortiGuard Labs",
"path": "sources/fortinet-fg-ir-26-186/index.html",
"hash": "3e0419cda2a6",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:17Z"
},
"src-fortinet-fortiweb-php2shell": {
"kind": "source",
"zone": "research",
"title": "Fortinet Community (FortiWeb knowledge base): How to block PHP2Shell (CVE-2026-109618, CVE-2026-109619) on FortiWeb | Community",
"path": "sources/fortinet-fortiweb-php2shell/index.html",
"hash": "476b226d1e1d",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-fortune-ai-tools-php-vulnerability": {
"kind": "source",
"zone": "research",
"title": "Fortune: AI helped discover the PHP vulnerability that could take down 70% of the internet | Fortune",
"path": "sources/fortune-ai-tools-php-vulnerability/index.html",
"hash": "3971554c0059",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-23T01:20Z"
},
"src-fortuneita-2026-10-22-php2shell-il-bug-che-poteva-m": {
"kind": "source",
"zone": "research",
"title": "Fortune Italia: PHP2Shell, il bug che poteva mandare in tilt il 70% dei siti mondiali. Ecco cosa è successo - Fortune Italia",
"path": "sources/fortuneita-2026-10-22-php2shell-il-bug-che-poteva-m/index.html",
"hash": "909c718b8f08",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-fr-ants-down": {
"kind": "source",
"zone": "research",
"title": "ants.gouv.fr: Accueil - France Titres (ANTS)",
"path": "sources/fr-ants-down/index.html",
"hash": "b2b152c33696",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-fr-interieur-down": {
"kind": "source",
"zone": "research",
"title": "interieur.gouv.fr: fr-interieur-down",
"path": "sources/fr-interieur-down/index.html",
"hash": "6ae3ca95437b",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-fr-ppolice-down": {
"kind": "source",
"zone": "research",
"title": "prefecturedepolice.interieur.gouv.fr: fr-ppolice-down",
"path": "sources/fr-ppolice-down/index.html",
"hash": "54535d828625",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-fr-prefecture-nord-down": {
"kind": "source",
"zone": "research",
"title": "nord.gouv.fr: Site en maintenance | Les Services de l'État",
"path": "sources/fr-prefecture-nord-down/index.html",
"hash": "8ed03a8dd189",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-fr-prefecture-rhone-down": {
"kind": "source",
"zone": "research",
"title": "rhone.gouv.fr: Site en maintenance | Les Services de l'État",
"path": "sources/fr-prefecture-rhone-down/index.html",
"hash": "352fefebe876",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-freepressjournal-bhopal-mp-government-websites-vulnerable": {
"kind": "source",
"zone": "research",
"title": "Free Press Journal: MP Government Websites Vulnerable To 'PHP2Shell' Cyber Threat; NIC Issues Critical Security Advisory, MP CERT Reports No",
"path": "sources/freepressjournal-bhopal-mp-government-websites-vulnerable/index.html",
"hash": "345844e4658d",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T13:34Z"
},
"src-gamemeca-view-php": {
"kind": "source",
"zone": "research",
"title": "게임메카: PHP 취약점에 게임사들도 비상, 점검에 서비스 종료까지",
"path": "sources/gamemeca-view-php/index.html",
"hash": "a3325b463969",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-gazzettadelsud-articoli-cronaca-2026-10-22-allarme-php2": {
"kind": "source",
"zone": "research",
"title": "Gazzetta del Sud: Allarme PHP2Shell, vulnerabilità gravissime: cosa rischiano i siti web - Gazzetta del Sud",
"path": "sources/gazzettadelsud-articoli-cronaca-2026-10-22-allarme-php2/index.html",
"hash": "ea8461543b57",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-generation-nt-actualites-php-faille-securite-php2shell": {
"kind": "source",
"zone": "research",
"title": "Génération NT: PHP2Shell : l'IA est à l'origine de la découverte de la faille qui ébranle le Web",
"path": "sources/generation-nt-actualites-php-faille-securite-php2shell/index.html",
"hash": "d384ce15d3d0",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-23T16:04Z"
},
"src-gigazine-news-20261023-cloudflare-stats-php2shell": {
"kind": "source",
"zone": "research",
"title": "GIGAZINE: 「PHP2Shell」脆弱性公表後に悪用試行が数百万件単位に増加したとCloudflareが報告、顧客向けには新ファイアウォールを開発して有効化 - GIGAZINE",
"path": "sources/gigazine-news-20261023-cloudflare-stats-php2shell/index.html",
"hash": "2222d686374d",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T08:37Z"
},
"src-ginjfo-actualites-politique-et-economie-failles": {
"kind": "source",
"zone": "research",
"title": "GinjFo: Failles critiques de PHP, des millions de tentatives d’exploitation ont eu lieu - GinjFo",
"path": "sources/ginjfo-actualites-politique-et-economie-failles/index.html",
"hash": "44afcd95ee13",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-gist-blevene-detection-guide": {
"kind": "source",
"zone": "research",
"title": "Blevene (GitHub gist): PHP2Shell: Detection Opportunities · GitHub",
"path": "sources/gist-blevene-detection-guide/index.html",
"hash": "5fbc6c46cae3",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:20Z"
},
"src-gist-silascutler-censys-query": {
"kind": "source",
"zone": "research",
"title": "Silas Cutler (GitHub gist): PHP2Shell Censys Query (CVE-2026-109618 / CVE-2026-109619 ) · GitHub",
"path": "sources/gist-silascutler-censys-query/index.html",
"hash": "8b8aa2d11631",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:28Z"
},
"src-github-darkfibr-php2shell-detect": {
"kind": "source",
"zone": "research",
"title": "darkfibr (Mike Haddock), GitHub: GitHub - darkfibr/php2shell-detect: Defensive detection toolkit for php2shell (CVE-2026-109618/109619, PHP ",
"path": "sources/github-darkfibr-php2shell-detect/index.html",
"hash": "885029f8690c",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:19Z"
},
"src-github-ghsa-6wmf-4rv5-p3rp": {
"kind": "source",
"zone": "research",
"title": "PHP (php/php-src GitHub security advisory, published by bukka): RCE via stale global state (CVE-2026-109619)",
"path": "sources/github-ghsa-6wmf-4rv5-p3rp/index.html",
"hash": "412b0656dad3",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-github-ghsa-w8hw-w9fx-j79w": {
"kind": "source",
"zone": "research",
"title": "PHP (php/php-src GitHub security advisory, published by bukka): RCE via OOM corruption (CVE-2026-109618)",
"path": "sources/github-ghsa-w8hw-w9fx-j79w/index.html",
"hash": "5bb1f31b65b2",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-github-lexsah-php2shell-detection": {
"kind": "source",
"zone": "research",
"title": "Lexsah, GitHub: GitHub - Lexsah/php2shell-detection: Detection and mitigation rules for CVE-2026-109618 / CVE-2026-109619 (php2shell). Blue-",
"path": "sources/github-lexsah-php2shell-detection/index.html",
"hash": "150f154df4e8",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:20Z"
},
"src-github-php-src-branch-7.4-backport": {
"kind": "source",
"zone": "research",
"title": "php/php-src on GitHub: Branch PHP-7.4-CVE-2026-109618-109619",
"path": "sources/github-php-src-branch-7.4-backport/index.html",
"hash": "9fccbef7ac5c",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:15Z"
},
"src-github-php-src-fix-commit-3584a98bd": {
"kind": "source",
"zone": "research",
"title": "php/php-src (git), read from a clone: Commit 3584a98bd: Avoid state corruption via bailout (the php2shell fix) and the PHP-7.4 backport 712e",
"path": "sources/github-php-src-fix-commit-3584a98bd/index.html",
"hash": "e0a9bc5851d9",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-github-php-src-tag-php-8.5.12": {
"kind": "source",
"zone": "research",
"title": "php/php-src on GitHub (release by adoy): Release PHP 8.5.12",
"path": "sources/github-php-src-tag-php-8.5.12/index.html",
"hash": "0e6f1ee02aa6",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:15Z"
},
"src-github-php-src-tags": {
"kind": "source",
"zone": "research",
"title": "php/php-src on GitHub: Tags · php/php-src",
"path": "sources/github-php-src-tags/index.html",
"hash": "8b9bb419c23f",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:15Z"
},
"src-github-rjmendez-phpup-2026": {
"kind": "source",
"zone": "research",
"title": "rjmendez, GitHub: GitHub - rjmendez/phpup-2026: IOCs and detection rules for CVE-2026-109618 / CVE-2026-109619 (PHP session.upload_progress ",
"path": "sources/github-rjmendez-phpup-2026/index.html",
"hash": "6ce9a55182cd",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:20Z"
},
"src-global-techradar-fr-fr-computing-internet-php2shell-cette": {
"kind": "source",
"zone": "research",
"title": "TechRadar: PHP2Shell : cette faille majeure menace des millions de sites, faut-il s'inquiéter ? | TechRadar",
"path": "sources/global-techradar-fr-fr-computing-internet-php2shell-cette/index.html",
"hash": "28a11a499fe9",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-24T08:37Z"
},
"src-globalnews-ottawa-sites": {
"kind": "source",
"zone": "research",
"title": "globalnews.ca: Ottawa taking down some federal websites over critical global vulnerability - National | Globalnews.ca",
"path": "sources/globalnews-ottawa-sites/index.html",
"hash": "45e1a6125722",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:16Z"
},
"src-greenbaypressgazette-press-release-story-197263-cyber-securit": {
"kind": "source",
"zone": "research",
"title": "Green Bay Press-Gazette: Cyber Security Services Launches Free PHP2Shell Check for Website Owners - Green Bay Press-Gazette",
"path": "sources/greenbaypressgazette-press-release-story-197263-cyber-securit/index.html",
"hash": "fd70afdb0795",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T08:37Z"
},
"src-guardian-wikipedia-ref-40-ge-flaw-causing-global": {
"kind": "source",
"zone": "research",
"title": "The Guardian: What is PHP and how serious is the computer language flaw causing website shutdowns? | Data and computer security | The Guardi",
"path": "sources/guardian-wikipedia-ref-40-ge-flaw-causing-global/index.html",
"hash": "1e5875efdab5",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T11:45Z"
},
"src-haber-teknoloji-siber-guvenlik-baskanligi-ndan": {
"kind": "source",
"zone": "research",
"title": "Haber.com: Siber Güvenlik Başkanlığı’ndan 'PHP2Shell' Açıklaması: e-Devlet Kapısı Güvende, Hizmetler Kesintisiz Sürüyor | Haber.com",
"path": "sources/haber-teknoloji-siber-guvenlik-baskanligi-ndan/index.html",
"hash": "3ef29b2512ad",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-haber7-teknoloji-haber-3670492-php-guvenlik-aci": {
"kind": "source",
"zone": "research",
"title": "Haber 7: PHP güvenlik açığı interneti tehdit ediyor: e-Devlet ve bankalar riskte mi? - Haber 7 TEKNOLOJİ",
"path": "sources/haber7-teknoloji-haber-3670492-php-guvenlik-aci/index.html",
"hash": "7b02e352b2b1",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-hankyung-article-2026102423207": {
"kind": "source",
"zone": "research",
"title": "한국경제: 北 연계 의심 해킹조직, PHP 취약점 공격 준비 정황…정부·금융 타깃 | 한국경제",
"path": "sources/hankyung-article-2026102423207/index.html",
"hash": "af07d0254cb7",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-24T13:34Z"
},
"src-hardwarecooking-failles-php-critiques-php2shell-correcti": {
"kind": "source",
"zone": "research",
"title": "HardwareCooking: Failles PHP critiques (PHP2Shell) : les correctifs sont sortis, mettez à jour maintenant",
"path": "sources/hardwarecooking-failles-php-critiques-php2shell-correcti/index.html",
"hash": "bbae4c116c03",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-hellot-mobile-article-html": {
"kind": "source",
"zone": "research",
"title": "헬로티: 에버스핀, PHP 치명적 취약점 공격 차단 규칙 적용…“공식 패치 전 대응”",
"path": "sources/hellot-mobile-article-html/index.html",
"hash": "02841cbbb902",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T23:25Z"
},
"src-helpnetsecurity-2026-10-22-php2shell-scanner-tool": {
"kind": "source",
"zone": "research",
"title": "Help Net Security: New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 - Help Net Security",
"path": "sources/helpnetsecurity-2026-10-22-php2shell-scanner-tool/index.html",
"hash": "ad2b63cee88d",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-helsinkitimes-finland-shutdown": {
"kind": "source",
"zone": "research",
"title": "Helsinki Times: Government websites shut down in Finland over critical security flaws - Helsinki Times",
"path": "sources/helsinkitimes-finland-shutdown/index.html",
"hash": "a92493dc6aaa",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:28Z"
},
"src-hirstart-hk-20261023-php2shell-teendok-nas-okon-t": {
"kind": "source",
"zone": "research",
"title": "Hírstart: Kritikus PHP-sebezhetőségek távoli kódfuttatást tesznek lehetővé, sürgősségi javítások érkeztek",
"path": "sources/hirstart-hk-20261023-php2shell-teendok-nas-okon-t/index.html",
"hash": "99d4e08d660a",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-24T16:05Z"
},
"src-homodigital-luka-w-php-myslisz-nie-mam-strony-jestem": {
"kind": "source",
"zone": "research",
"title": "HomoDigital: Luka w PHP. Myślisz - nie ma strony, jestem bezpieczny. To mit!",
"path": "sources/homodigital-luka-w-php-myslisz-nie-mam-strony-jestem/index.html",
"hash": "6189f768b863",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-26T14:42Z"
},
"src-howtogeek-sites-down": {
"kind": "source",
"zone": "research",
"title": "howtogeek.com: Your favorite websites are down due to an internet-breaking PHP security flaw",
"path": "sources/howtogeek-sites-down/index.html",
"hash": "1d4b21ae646c",
"v": 2,
"first": "0.10.3",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-huntress-php2shell-rapid-response": {
"kind": "source",
"zone": "research",
"title": "Huntress: Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) | Huntress",
"path": "sources/huntress-php2shell-rapid-response/index.html",
"hash": "35f2c9a6a960",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:28Z"
},
"src-hurbra-php-sakerhetshal-2026-guide": {
"kind": "source",
"zone": "research",
"title": "hurbra: PHP-säkerhetshålen 2026 – Så skyddar du din webbplats",
"path": "sources/hurbra-php-sakerhetshal-2026-guide/index.html",
"hash": "4280f21c9113",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-24T16:05Z"
},
"src-hurriyet-dunya-dunya-genelinde-siber-guvenlik-aci": {
"kind": "source",
"zone": "research",
"title": "Hürriyet: Dünya genelinde siber güvenlik açığı: PHP programlama dilinde sorunlar tespit edildi! Küresel çapta devlet siteleri geçici olarak ",
"path": "sources/hurriyet-dunya-dunya-genelinde-siber-guvenlik-aci/index.html",
"hash": "ec7bb62cc221",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-hwupgrade-news-sicurezza-software-falle-php-gia-so": {
"kind": "source",
"zone": "research",
"title": "Hardware Upgrade: Falle PHP già sotto attacco: l'IA le ha scoperte e ora scrive gli exploit | Hardware Upgrade",
"path": "sources/hwupgrade-news-sicurezza-software-falle-php-gia-so/index.html",
"hash": "362472b629cd",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-ia-acs-article-2026-govt-sites-go-down-after-ai-finds-critical-php": {
"kind": "source",
"zone": "research",
"title": "Information Age (ACS): Govt sites go down after AI finds 'critical' PHP vulnerabilities | Information Age | ACS",
"path": "sources/ia-acs-article-2026-govt-sites-go-down-after-ai-finds-critical-php/index.html",
"hash": "24a03ba89471",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-ictjournal-news-2026-10-22-deux-failles-critiques-d": {
"kind": "source",
"zone": "research",
"title": "ICTjournal: PHP2Shell: des milliers de serveurs vulnérables, des attaques déjà tentées (update) | ICTjournal",
"path": "sources/ictjournal-news-2026-10-22-deux-failles-critiques-d/index.html",
"hash": "538e09fbd378",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-idxchannel-playlists-jutaan-situs-terancam-usai-ai": {
"kind": "source",
"zone": "research",
"title": "IDX Channel: Jutaan Situs Terancam usai AI Temukan Celah pada Bahasa Pemrograman PHP",
"path": "sources/idxchannel-playlists-jutaan-situs-terancam-usai-ai/index.html",
"hash": "0c62973a2cfd",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-ijiwei-n-1122779": {
"kind": "source",
"zone": "research",
"title": "ijiwei: 全球互联网“今夜惊雷”：AI发现的PHP高危漏洞“PHP2Shell”引发多国政企网站紧急关站",
"path": "sources/ijiwei-n-1122779/index.html",
"hash": "a45e020d1d94",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-ilsole24ore-art-php2shell-quando-vulnerabilita-softw": {
"kind": "source",
"zone": "research",
"title": "Il Sole 24 Ore: PHP2Shell, quando una vulnerabilità del software diventa un’emergenza mondiale - Il Sole 24 ORE",
"path": "sources/ilsole24ore-art-php2shell-quando-vulnerabilita-softw/index.html",
"hash": "4e002555473b",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-imperva-blog-php2shell": {
"kind": "source",
"zone": "research",
"title": "Imperva Threat Research (Nadav Avital, Bar Menachem): PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment | Imperva",
"path": "sources/imperva-blog-php2shell/index.html",
"hash": "4f47012b211c",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-impress-watch-valtec": {
"kind": "source",
"zone": "research",
"title": "INTERNET Watch (Impress): バルテック、サイバー攻撃によりサービス停止、情報流出の可能性（記事訂正） - INTERNET Watch",
"path": "sources/impress-watch-valtec/index.html",
"hash": "079ac064736e",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:14Z"
},
"src-in-mashable-tech-115245-fbi-releases-php2shell-advisory-as-the-internet": {
"kind": "source",
"zone": "research",
"title": "Mashable India: FBI Releases PHP2Shell Advisory As The Internet Explodes In Hilarious PHP Memes; Here Are The Best Ones",
"path": "sources/in-mashable-tech-115245-fbi-releases-php2shell-advisory-as-the-internet/index.html",
"hash": "611687d83ba8",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-inc42-features-php2shell-who-is-at-risk-and-ho": {
"kind": "source",
"zone": "research",
"title": "Inc42: PHP2Shell: Who Is At Risk And How Can Businesses Stay Safe?",
"path": "sources/inc42-features-php2shell-who-is-at-risk-and-ho/index.html",
"hash": "ea45ff8dab2c",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T16:05Z"
},
"src-indianexpress-article-technology-cert-in-php-vulnerability-alert-india-cyb": {
"kind": "source",
"zone": "research",
"title": "The Indian Express: PHP security alert: What US and Indian government warnings mean for websites | Technology News - The Indian Express",
"path": "sources/indianexpress-article-technology-cert-in-php-vulnerability-alert-india-cyb/index.html",
"hash": "2307ff4d4fea",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-indiatvnews-technology-news-us-nsa-issues-urgent-php2shell-warning-advis": {
"kind": "source",
"zone": "research",
"title": "India TV News: US NSA warns of PHP security flaw that could let hackers take over servers: How to stay safe - India TV News",
"path": "sources/indiatvnews-technology-news-us-nsa-issues-urgent-php2shell-warning-advis/index.html",
"hash": "b4bd753d83a1",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T08:03Z"
},
"src-indigodergisi-2026-10-php-guvenlik-acigi-php2shell": {
"kind": "source",
"zone": "research",
"title": "İndigo Dergisi: PHP güvenlik açığı (PHP2Shell): Ne oldu, ne yapmalı? Adım adım rehber",
"path": "sources/indigodergisi-2026-10-php-guvenlik-acigi-php2shell/index.html",
"hash": "45cc47e3e13c",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-inet-detik-security-d-8718436-saking-bahayanya-php2": {
"kind": "source",
"zone": "research",
"title": "detikInet: Saking Bahayanya PHP2Shell, Kepala Negara Sampai Turun Tangan",
"path": "sources/inet-detik-security-d-8718436-saking-bahayanya-php2/index.html",
"hash": "b33ce68c53b2",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-infobae-estados-unidos-2026-10-23-php2shell-como": {
"kind": "source",
"zone": "research",
"title": "Infobae: PHP2Shell: cómo actuar ante la alerta del FBI que pide desconectar sitios web vulnerables en Estados Unidos - Infobae",
"path": "sources/infobae-estados-unidos-2026-10-23-php2shell-como/index.html",
"hash": "8b69c7ab434f",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-infomoney-mundo-php-falha-ameaca-tirar-sites-ar": {
"kind": "source",
"zone": "research",
"title": "InfoMoney: PHP: falha em uma linguagem de programação ameaça tirar sites do ar; entenda",
"path": "sources/infomoney-mundo-php-falha-ameaca-tirar-sites-ar/index.html",
"hash": "9d6412dffb99",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-infopoint-security-php2shell-chaos-ein-tag-der-die-sicherhe": {
"kind": "source",
"zone": "research",
"title": "Infopoint Security: PHP2Shell-Chaos: Ein Tag der Security-Teams in Alarmbereitschaft versetzte",
"path": "sources/infopoint-security-php2shell-chaos-ein-tag-der-die-sicherhe/index.html",
"hash": "cc6b500cc7d1",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-infosecurity-magazine-news-php2shell-exploitation-attempt": {
"kind": "source",
"zone": "research",
"title": "Infosecurity Magazine: PHP2Shell Exploitation Attempt Detected Four Days Before Disclosure - Infosecurity Magazine",
"path": "sources/infosecurity-magazine-news-php2shell-exploitation-attempt/index.html",
"hash": "7d291ff1257c",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-inibalikpapan-pemprov-kaltim-waspadai-php2shell-celah": {
"kind": "source",
"zone": "research",
"title": "IniBalikpapan.Com: Pemprov Kaltim Waspadai PHP2Shell, Celah Siber Kritis Ancam Server Pemerintahan - IniBalikpapan.Com",
"path": "sources/inibalikpapan-pemprov-kaltim-waspadai-php2shell-celah/index.html",
"hash": "a0a800b4bbdb",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-insiderpaper-archive-wikipedia": {
"kind": "source",
"zone": "research",
"title": "insiderpaper.com: Internet Archive down, Wikipedia hit by outages amid PHP issues - Insider Paper",
"path": "sources/insiderpaper-archive-wikipedia/index.html",
"hash": "8719fc1d165b",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:13Z"
},
"src-insurance-business-au-asiapac-attacks-begin": {
"kind": "source",
"zone": "research",
"title": "Insurance Business: Critical global website flaw sparks alerts across Asia-Pac as attacks begin | Insurance Business",
"path": "sources/insurance-business-au-asiapac-attacks-begin/index.html",
"hash": "c1f53ef51496",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-23T01:20Z"
},
"src-insurancebusiness-uk-councils": {
"kind": "source",
"zone": "research",
"title": "insurancebusinessmag.com: UK councils and Met Police among sites pulled offline after NCSC alert | Insurance Business",
"path": "sources/insurancebusiness-uk-councils/index.html",
"hash": "f753028e91e2",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:12Z"
},
"src-insurancebusiness-uk-councils-met": {
"kind": "source",
"zone": "research",
"title": "Insurance Business (Matthew Sellers): UK councils and Met Police among sites pulled offline after NCSC alert | Insurance Business",
"path": "sources/insurancebusiness-uk-councils-met/index.html",
"hash": "78d84a9fb72d",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-iphonesoft-2026-10-22-faille-php-5-8-5-savoir-situa": {
"kind": "source",
"zone": "research",
"title": "iPhoneSoft: Faille PHP 5 à 8.5 : tout savoir sur la situation d'urgence - iPhoneSoft",
"path": "sources/iphonesoft-2026-10-22-faille-php-5-8-5-savoir-situa/index.html",
"hash": "1f54485dc131",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-istanbulticaretgazetesi-siber-guvenlik-baskanligindan-php2shell": {
"kind": "source",
"zone": "research",
"title": "İstanbul Ticaret Gazetesi: Siber Güvenlik Başkanlığı'ndan PHP2Shell açığı uyarısı: Kritik sistemler için tarama başlatıldı",
"path": "sources/istanbulticaretgazetesi-siber-guvenlik-baskanligindan-php2shell/index.html",
"hash": "c4ede93908a6",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T12:04Z"
},
"src-it-daily-shortnews-php2shell-die-aktuelle-lage": {
"kind": "source",
"zone": "research",
"title": "it-daily.net: PHP2Shell: Die aktuelle Lage nach dem Patch",
"path": "sources/it-daily-shortnews-php2shell-die-aktuelle-lage/index.html",
"hash": "a9178869ae5d",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-it-finance-yahoo-notizie-avviso-per-gli-exchange-di-22423": {
"kind": "source",
"zone": "research",
"title": "Yahoo Finanza: Avviso per gli exchange di crypto: una grave vulnerabilità PHP mette a rischio i siti di pagamento",
"path": "sources/it-finance-yahoo-notizie-avviso-per-gli-exchange-di-22423/index.html",
"hash": "33c997e11cba",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-it-finanzmagazin-php2shell-sicherheitsluecken-bedrohen-we": {
"kind": "source",
"zone": "research",
"title": "IT Finanzmagazin: PHP2Shell-Sicherheitslücken bedrohen auch Banken und Finanzdienstleister",
"path": "sources/it-finanzmagazin-php2shell-sicherheitsluecken-bedrohen-we/index.html",
"hash": "0023a4147bef",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-itdaily-blogs-logiciel-php2shell-bug-php": {
"kind": "source",
"zone": "research",
"title": "ITdaily: PHP2Shell : une faille majeure dans PHP activement exploitée avant la disponibilité du correctif - ITdaily",
"path": "sources/itdaily-blogs-logiciel-php2shell-bug-php/index.html",
"hash": "647f3ad59936",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-itdaily-blogs-software-php2shell-bug-php": {
"kind": "source",
"zone": "research",
"title": "ITdaily: PHP2Shell: groot lek in PHP actief misbruikt, nog voor beschikbaarheid patch - ITdaily",
"path": "sources/itdaily-blogs-software-php2shell-bug-php/index.html",
"hash": "7dd2a6588d47",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-itdaily-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "아이티데일리: 스틸리언, ‘PHP2Shell’ 취약점 무료 점검 서비스 공개 < 보안 < AI/ICT < 기사본문 - 아이티데일리",
"path": "sources/itdaily-news-articleview-html/index.html",
"hash": "22e4a1c63c69",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-itdaily-php-clumsy-announcement": {
"kind": "source",
"zone": "research",
"title": "ITdaily (Jens Jonkers): PHP Foundation angered by ‘clumsy’ disclosure of vulnerabilities - ITdaily",
"path": "sources/itdaily-php-clumsy-announcement/index.html",
"hash": "892eda26aaf3",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-ithome-1-016-980-htm": {
"kind": "source",
"zone": "research",
"title": "IT之家: 360安全云发布PHP2Shell应急防护方案，助力政企网站抢修窗口期 - IT之家",
"path": "sources/ithome-1-016-980-htm/index.html",
"hash": "0433da72c619",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-itsocial-cybersecurite-cybersecurite-articles-php": {
"kind": "source",
"zone": "research",
"title": "IT Social: PHP2Shell, la mise à jour ferme la faille, mais oblige à traquer les compromissions possibles - IT SOCIAL",
"path": "sources/itsocial-cybersecurite-cybersecurite-articles-php/index.html",
"hash": "4d168a27afd2",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-itweb-article-php2shell-alarm-a-major-cyber-se": {
"kind": "source",
"zone": "research",
"title": "ITWeb: PHP2Shell alarm a major cyber security wake-up call | ITWeb",
"path": "sources/itweb-article-php2shell-alarm-a-major-cyber-se/index.html",
"hash": "d25c34813574",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-itwire-business-it-news-security-php2shell-the": {
"kind": "source",
"zone": "research",
"title": "itwire: PHP2Shell: the 14-year-old bugs that pulled cyber.gov.au and government sites worldwide offline | iTWire",
"path": "sources/itwire-business-it-news-security-php2shell-the/index.html",
"hash": "7c0dbdcb7b07",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T16:05Z"
},
"src-japan-zdnet-article-35253966": {
"kind": "source",
"zone": "research",
"title": "ZDNET Japan: 「PHP2Shell」のリスク低減に向けて直ちに実行すべき手順は - ZDNET Japan",
"path": "sources/japan-zdnet-article-35253966/index.html",
"hash": "1ef60b5bd4ce",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-jawapos-teknologi-2610230446-celah-php2shell-anc": {
"kind": "source",
"zone": "research",
"title": "Jawa Pos: Celah PHP2Shell Ancam Server, Peretas Bisa Ambil Alih Sistem Tanpa Login",
"path": "sources/jawapos-teknologi-2610230446-celah-php2shell-anc/index.html",
"hash": "8914d9f95210",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-24T13:34Z"
},
"src-jeuxvideo-news-2110338-une-faille-critique-dans-ph": {
"kind": "source",
"zone": "research",
"title": "JeuxVideo.com: Une faille critique dans PHP fait trembler la moitié du web mondial - JVTECH by jeuxvideo.com",
"path": "sources/jeuxvideo-news-2110338-une-faille-critique-dans-ph/index.html",
"hash": "9960a683b20a",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T23:25Z"
},
"src-jiji-jc-article": {
"kind": "source",
"zone": "research",
"title": "時事ドットコム: PHPに深刻度9.2の緊急脆弱性「php2shell」発覚、WordPressサイト運営企業向けの対策チェックリストをTorchUpが無料公開：時事ドットコム",
"path": "sources/jiji-jc-article/index.html",
"hash": "241f08c137c0",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-23T16:04Z"
},
"src-jn-pt-sites-desligados": {
"kind": "source",
"zone": "research",
"title": "jn.pt: Erro crítico em PHP obriga desligação de vários sites",
"path": "sources/jn-pt-sites-desligados/index.html",
"hash": "2f15c80b8a7f",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:16Z"
},
"src-journalducanada-php2shell-des-serveurs-exposes-a-une-cyb": {
"kind": "source",
"zone": "research",
"title": "Journal Du Canada: PHP2Shell : des serveurs exposés à une cybermenace mondiale",
"path": "sources/journalducanada-php2shell-des-serveurs-exposes-a-une-cyb/index.html",
"hash": "71d364fc82e1",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-journalducoin-technologies-php2shell-prefectures-impots-berc": {
"kind": "source",
"zone": "research",
"title": "Journal Du Coin: PHP2Shell : préfectures, impôts, Bercy et Météo-France coupés sur demande de l'ANSSI - Journal du Coin",
"path": "sources/journalducoin-technologies-php2shell-prefectures-impots-berc/index.html",
"hash": "c24042661a67",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T17:15Z"
},
"src-jpcert-at260033": {
"kind": "source",
"zone": "research",
"title": "JPCERT/CC (Japan): PHPにおける複数の脆弱性（CVE-2026-109618、CVE-2026-109619）に関する注意喚起 (JPCERT-AT-2026-0033)",
"path": "sources/jpcert-at260033/index.html",
"hash": "57738a2cc5ce",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:17Z"
},
"src-jpcert-home": {
"kind": "source",
"zone": "research",
"title": "JPCERT/CC: JPCERT home",
"path": "sources/jpcert-home/index.html",
"hash": "ac73b98afb24",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-kathmandupost-science-technology-2026-10-25-php2shell": {
"kind": "source",
"zone": "research",
"title": "The Kathmandu Post: PHP2Shell security flaw forces thousands of Nepali websites offline",
"path": "sources/kathmandupost-science-technology-2026-10-25-php2shell/index.html",
"hash": "0929b5c3a694",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-khabaragency-news254841-html": {
"kind": "source",
"zone": "research",
"title": "وكالة خبر للأنباء: ثغرات PHP2Shell: تهديد أمني حرج يضرب خوادم الإنترنت | وكالة خبر للأنباء",
"path": "sources/khabaragency-news254841-html/index.html",
"hash": "91e42f25574b",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-knews-news-7898c3112ba7f79b25f7a44622d2e7d4": {
"kind": "source",
"zone": "research",
"title": "知新聞: PHP2Shell出現第3個漏洞　但因這原因不急著修補｜知新聞",
"path": "sources/knews-news-7898c3112ba7f79b25f7a44622d2e7d4/index.html",
"hash": "54ef2998adde",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T12:04Z"
},
"src-kocpc-archives-700486": {
"kind": "source",
"zone": "research",
"title": "電腦王阿達: PHP2Shell漏洞來勢洶洶！趨勢科技TrendLife推「PHP漏洞急救包」將威脅擋在網站前 - 電腦王阿達",
"path": "sources/kocpc-archives-700486/index.html",
"hash": "e7669e16cef2",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-24T13:34Z"
},
"src-koran-jakarta-2026-10-22-upaya-global-perbaiki-celah-keamana": {
"kind": "source",
"zone": "research",
"title": "Koran Jakarta ®: Upaya Global Perbaiki Celah Keamanan Siber PHP, dari Amazon hingga Kementerian Jepang",
"path": "sources/koran-jakarta-2026-10-22-upaya-global-perbaiki-celah-keamana/index.html",
"hash": "88a511564e5b",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-kursors-2026-10-21-atklatas-kritiskas-ievainojam": {
"kind": "source",
"zone": "research",
"title": "kursors: Atklātas kritiskas ievainojamības “PHP” programmēšanas valodā un tas skar lielāko daļu publisko tīmekļa vietņu | Kursors.lv",
"path": "sources/kursors-2026-10-21-atklatas-kritiskas-ievainojam/index.html",
"hash": "c3c3d0eef20c",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-lalibre-economie-digital-2026-10-21-une-faille-critique-mena": {
"kind": "source",
"zone": "research",
"title": "La Libre.be: Une faille critique menace des milliers de sites internet : plusieurs plateformes belges concernées, un correctif publié - La L",
"path": "sources/lalibre-economie-digital-2026-10-21-une-faille-critique-mena/index.html",
"hash": "06fd68fe96bd",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-lampost-teknologi-celah-php2shell-ancam-website": {
"kind": "source",
"zone": "research",
"title": "LAMPOST.CO: Celah PHP2Shell Ancam Website, Pengelola Wajib Waspada",
"path": "sources/lampost-teknologi-celah-php2shell-ancam-website/index.html",
"hash": "9c2306149dfd",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T23:25Z"
},
"src-larazon-tecnologia-consumo-php-nuevo-fallo-segur": {
"kind": "source",
"zone": "research",
"title": "La Razón: PHP descubre otro fallo de seguridad sin parche apenas dos días después de una actualización urgente: Cloudflare y Amazon ya detec",
"path": "sources/larazon-tecnologia-consumo-php-nuevo-fallo-segur/index.html",
"hash": "feb028965b5b",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-24T08:37Z"
},
"src-latercera-tecnologia-noticia-php2shell-ia-falla-de": {
"kind": "source",
"zone": "research",
"title": "La Tercera: PHP2Shell: una IA descubre una falla de seguridad que amenaza a millones de sitios web en todo el mundo - La Tercera",
"path": "sources/latercera-tecnologia-noticia-php2shell-ia-falla-de/index.html",
"hash": "67a5e72f904e",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-latintimes-php2shell-ai-found-bug-hiding-70-web-mil": {
"kind": "source",
"zone": "research",
"title": "Latin Times: PHP2Shell: AI Found the Bug Hiding in 70% of the Web. Millions Attacked. Patch Now",
"path": "sources/latintimes-php2shell-ai-found-bug-hiding-70-web-mil/index.html",
"hash": "e8f9a1cb35ac",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T11:04Z"
},
"src-lavanguardia-vida-20261021-11664852-alerta-mundial-do": {
"kind": "source",
"zone": "research",
"title": "La Vanguardia: Alerta mundial por dos fallos en el lenguaje PHP con el que se programan las webs",
"path": "sources/lavanguardia-vida-20261021-11664852-alerta-mundial-do/index.html",
"hash": "59113f048647",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T23:25Z"
},
"src-lbc-uk-websites-offline": {
"kind": "source",
"zone": "research",
"title": "LBC: Websites taken offline as ‘critical’ security flaw hits Met Police, Traitors and government sites | LBC",
"path": "sources/lbc-uk-websites-offline/index.html",
"hash": "4a38d42f0b25",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:29Z"
},
"src-lebigdata-php2shell-des-millions-dattaques-frappen": {
"kind": "source",
"zone": "research",
"title": "LEBIGDATA.FR: PHP2Shell : comment protéger votre site des attaques PHP",
"path": "sources/lebigdata-php2shell-des-millions-dattaques-frappen/index.html",
"hash": "ec639c4907f5",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-leiphone-category-industrynews-9dejmhebinubut49-h": {
"kind": "source",
"zone": "research",
"title": "雷峰网: “PHP2Shell”敲响企业漏洞警钟，奇安信天戟提供一键速查方案 | 雷峰网",
"path": "sources/leiphone-category-industrynews-9dejmhebinubut49-h/index.html",
"hash": "1d628eff5b9f",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-lemondeinformatique-actualites-lire-deux-failles-critiques-d": {
"kind": "source",
"zone": "research",
"title": "Le Monde Informatique: Deux failles critiques dans PHP : les entreprises sous pression - Le Monde Informatique",
"path": "sources/lemondeinformatique-actualites-lire-deux-failles-critiques-d/index.html",
"hash": "270545d27c57",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T08:03Z"
},
"src-leptidigital-securite-informatique-cybersecurite-fail": {
"kind": "source",
"zone": "research",
"title": "LEPTIDIGITAL: Cybersécurité : des failles PHP importantes ont été détectées, voici les versions de PHP à installer d’urgence sur vos sites",
"path": "sources/leptidigital-securite-informatique-cybersecurite-fail/index.html",
"hash": "0d0e29dda2ae",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-lequotidien-article-societe-2026-10-22-web-mondial-e": {
"kind": "source",
"zone": "research",
"title": "Le Quotidien de la Réunion: PHP2Shell : alerte sur des failles critiques à La Réunion",
"path": "sources/lequotidien-article-societe-2026-10-22-web-mondial-e/index.html",
"hash": "6a0530787cc0",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-lesaffaires-opinions-php2shell-ce-quil-faut-en-reten": {
"kind": "source",
"zone": "research",
"title": "Les Affaires: PHP2Shell: ce qu’il faut retenir des failles révélées cette semaine - Les Affaires",
"path": "sources/lesaffaires-opinions-php2shell-ce-quil-faut-en-reten/index.html",
"hash": "6984d3dfe080",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-lessentiel-fr-story-mondeluxembourg-une-faille-de-s": {
"kind": "source",
"zone": "research",
"title": "L'essentiel: Faille PHP «PHP2Shell»: des millions de sites web menacés dans le monde - L'essentiel",
"path": "sources/lessentiel-fr-story-mondeluxembourg-une-faille-de-s/index.html",
"hash": "3970ac72d065",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-letemps-php-sites-debranches": {
"kind": "source",
"zone": "research",
"title": "letemps.ch: Alerte sur le Web: des millions de sites sont débranchés en urgence à cause de failles majeures au cœur de PHP - Le Temps",
"path": "sources/letemps-php-sites-debranches/index.html",
"hash": "b58591ded4c7",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:14Z"
},
"src-libertatea-stiri-ce-este-vulnerabilitatea-php-care": {
"kind": "source",
"zone": "research",
"title": "Libertatea: Ce este vulnerabilitatea critică din PHP care lovește 70% din site-urile lumii și expune platformele WordPress la atacuri masive",
"path": "sources/libertatea-stiri-ce-este-vulnerabilitatea-php-care/index.html",
"hash": "2bb3d6aed85b",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-24T13:34Z"
},
"src-lineaedp-rubriche-sicurezza-php2shell-lia-acceler": {
"kind": "source",
"zone": "research",
"title": "LineaEDP: PHP2Shell, l’IA accelera gli attacchi informatici - LineaEDP",
"path": "sources/lineaedp-rubriche-sicurezza-php2shell-lia-acceler/index.html",
"hash": "b6d3412c74bd",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T23:25Z"
},
"src-linternaute-hightech-internet-11310057-panne-interne": {
"kind": "source",
"zone": "research",
"title": "Linternaute.com: Failles PHP : c'est quoi ? On vous explique la panique mondiale sur internet, l'IA au coeur du problème",
"path": "sources/linternaute-hightech-internet-11310057-panne-interne/index.html",
"hash": "7561176ea734",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-lisanews-internacional-un-fallo-en-php-detectado": {
"kind": "source",
"zone": "research",
"title": "LISA News: PHP2Shell: el fallo crítico de PHP hallado con IA",
"path": "sources/lisanews-internacional-un-fallo-en-php-detectado/index.html",
"hash": "05ba0f5735ab",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T12:04Z"
},
"src-lite-almasryalyoum-technolight-396865": {
"kind": "source",
"zone": "research",
"title": "المصري لايت: حكاية لغة PHP المستخدمة في المواقع الإلكترونية: ثغرة فيها تهدد بريطانيا بالجوع والعطش - المصري لايت",
"path": "sources/lite-almasryalyoum-technolight-396865/index.html",
"hash": "fcade1fa8978",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T14:40Z"
},
"src-lorikeet-php2shell": {
"kind": "source",
"zone": "research",
"title": "Lorikeet Security: php2shell: Inside the Leaked Critical PHP Flaws Triggering Emergency RCE Patching (CVE-2026-109618 & CVE-2026-109619) | L",
"path": "sources/lorikeet-php2shell/index.html",
"hash": "f3f2f6b2ab5e",
"v": 2,
"first": "0.4.1",
"changed": "0.19.2",
"date": "2026-10-25"
},
"src-lupa-aktuality-php2shell-kriticke-zranitelnos": {
"kind": "source",
"zone": "research",
"title": "Lupa.cz: PHP2Shell: kritické zranitelnosti v PHP dávají útočníkům možnost spustit kód na serverech - Lupa.cz",
"path": "sources/lupa-aktuality-php2shell-kriticke-zranitelnos/index.html",
"hash": "874fc0c57ded",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-lupa-cvut-cyber-attack": {
"kind": "source",
"zone": "research",
"title": "Lupa.cz: ČVUT čelí kybernetickému útoku, údajně doplatilo na kritickou chybu v PHP - Lupa.cz",
"path": "sources/lupa-cvut-cyber-attack/index.html",
"hash": "7d98b46285df",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:15Z"
},
"src-lv-latvija-gov": {
"kind": "source",
"zone": "research",
"title": "latvija.gov.lv: lv-latvija-gov",
"path": "sources/lv-latvija-gov/index.html",
"hash": "8217db750569",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-m-ddaily-page-view-2026102611404279049": {
"kind": "source",
"zone": "research",
"title": "디지털데일리: [PHP 비상] 이번엔 Node.js…연이은 대형 취약점에 웹서버 보안 `빨간불` - 디지털데일리",
"path": "sources/m-ddaily-page-view-2026102611404279049/index.html",
"hash": "b614fa200df6",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-26T14:42Z"
},
"src-macitynet-php2shell-vulnerabilita-php-siti-offline": {
"kind": "source",
"zone": "research",
"title": "macitynet.it: PHP2Shell: siti offline e aggiornamenti urgenti per PHP - macitynet.it",
"path": "sources/macitynet-php2shell-vulnerabilita-php-siti-offline/index.html",
"hash": "03b27175a376",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-mainichi-articles-20261023-pr2-00m-020-690000c": {
"kind": "source",
"zone": "research",
"title": "毎日新聞デジタル: プレスリリース：HBLAB、PHPの重大脆弱性「PHP2Shell」の影響範囲を調査するアセスメントサービスの提供を開始（PR TIMES） | 毎日新聞",
"path": "sources/mainichi-articles-20261023-pr2-00m-020-690000c/index.html",
"hash": "ddc1fc4aa788",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-malaymail-news-singapore-2026-10-23-singapore-warn": {
"kind": "source",
"zone": "research",
"title": "Malay Mail: Singapore warns of critical PHP vulnerabilities that could expose web servers to hackers | Malay Mail",
"path": "sources/malaymail-news-singapore-2026-10-23-singapore-warn/index.html",
"hash": "603b9d073afd",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-26T12:14Z"
},
"src-malwarebytes-nl-blog-bugs-2026-10-php2shell-why-websi": {
"kind": "source",
"zone": "research",
"title": "malwarebytes: PHP2Shell: Waarom veel websites offline moesten gaan | Malwarebytes",
"path": "sources/malwarebytes-nl-blog-bugs-2026-10-php2shell-why-websi/index.html",
"hash": "8c4a5efb7eab",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-mansethaber-bilim-teknoloji-php2shell-nedir-kimleri": {
"kind": "source",
"zone": "research",
"title": "mansethaber: PHP2Shell nedir? Kimleri etkiliyor, site sahipleri ne yapmalı? - Manşet Haber",
"path": "sources/mansethaber-bilim-teknoloji-php2shell-nedir-kimleri/index.html",
"hash": "1da3ae70ab23",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-marketing4ecommerce-crisis-seguridad-php": {
"kind": "source",
"zone": "research",
"title": "Marketing4eCommerce: La crisis de seguridad en PHP, explicada para dummies",
"path": "sources/marketing4ecommerce-crisis-seguridad-php/index.html",
"hash": "269820454e94",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-matricedigitale-2026-10-25-php2shell-italia-csirt-serviz": {
"kind": "source",
"zone": "research",
"title": "Matrice Digitale: PHP2Shell, allarme CSIRT Italia: l’81,9% dei servizi PHP risulta vulnerabile - Matrice Digitale",
"path": "sources/matricedigitale-2026-10-25-php2shell-italia-csirt-serviz/index.html",
"hash": "d3387b9156e6",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-medcom-teknologi-news-teknologi-en442w3n-bssn-p": {
"kind": "source",
"zone": "research",
"title": "Medcom.id: BSSN Peringatkan Celah PHP2Shell, Jutaan Website Berisiko Diserang",
"path": "sources/medcom-teknologi-news-teknologi-en442w3n-bssn-p/index.html",
"hash": "110953f77c6d",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-mediaindonesia-teknologi-947268-celah-keamanan-php-dite": {
"kind": "source",
"zone": "research",
"title": "Media Indonesia: Celah Keamanan PHP Ditemukan AI, Pemerintah dan Situs Global Lakukan Pemadaman",
"path": "sources/mediaindonesia-teknologi-947268-celah-keamanan-php-dite/index.html",
"hash": "b227a68bb71e",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-medianama-2026-10-223-php-vulnerabilities-global-rush-update": {
"kind": "source",
"zone": "research",
"title": "MediaNama: What are the two PHP vulnerabilities behind a global rush to update",
"path": "sources/medianama-2026-10-223-php-vulnerabilities-global-rush-update/index.html",
"hash": "4e10fe081888",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T08:03Z"
},
"src-miltonkeynes-must-read-astra-security-launches-free-t": {
"kind": "source",
"zone": "research",
"title": "Milton Keynes Citizen: Astra Security launches free tools to help organisations identify PHP2Shell vulnerabilities",
"path": "sources/miltonkeynes-must-read-astra-security-launches-free-t/index.html",
"hash": "78d043d42007",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-moncloa-2026-10-22-vulnerabilidad-php2shell-fall": {
"kind": "source",
"zone": "research",
"title": "MONCLOA.COM: La IA descubre la vulnerabilidad PHP2Shell: el fallo crítico de PHP que expone al 70% de la web mundial",
"path": "sources/moncloa-2026-10-22-vulnerabilidad-php2shell-fall/index.html",
"hash": "6e2817f92113",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-morgenpost-politik-article413475223-weltweite-siche": {
"kind": "source",
"zone": "research",
"title": "Berliner Morgenpost: PHP-Sicherheitslücke und Hacker-Angriffe: Viele Websites wieder online",
"path": "sources/morgenpost-politik-article413475223-weltweite-siche/index.html",
"hash": "d58752655f73",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-24T08:37Z"
},
"src-moroccoworldnews-2026-10-343335-moroccos-dgssi-warns-of-critical-php2shell-vu": {
"kind": "source",
"zone": "research",
"title": "Morocco World News: Morocco’s DGSSI Warns of Critical ‘PHP2Shell’ Vulnerabilities",
"path": "sources/moroccoworldnews-2026-10-343335-moroccos-dgssi-warns-of-critical-php2shell-vu/index.html",
"hash": "48ca66da37bb",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-mt-tech-2026-10-24-2026102414170377166": {
"kind": "source",
"zone": "research",
"title": "머니투데이: PHP 취약점 노린 북한 해킹 모의 정황…핵심 타깃은 한·미·일 - 머니투데이",
"path": "sources/mt-tech-2026-10-24-2026102414170377166/index.html",
"hash": "671dbfb3a837",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-24T13:34Z"
},
"src-muycomputer-2026-10-21-php2shell-el-fallo-de-php-que": {
"kind": "source",
"zone": "research",
"title": "MuyComputer: PHP2Shell: el fallo de PHP que ha puesto en jaque a Internet",
"path": "sources/muycomputer-2026-10-21-php2shell-el-fallo-de-php-que/index.html",
"hash": "460e61647d56",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-mynet-php-guvenlik-acigi-alarmi-iki-kritik-aci": {
"kind": "source",
"zone": "research",
"title": "Mynet: PHP güvenlik açığı alarmı! İki kritik açık bulundu: PHP nedir, ne işe yarar? - TREND",
"path": "sources/mynet-php-guvenlik-acigi-alarmi-iki-kritik-aci/index.html",
"hash": "c6b129d1b7aa",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-ncsc-news-php": {
"kind": "source",
"zone": "research",
"title": "UK National Cyber Security Centre (NCSC): Critical security issue affecting PHP",
"path": "sources/ncsc-news-php/index.html",
"hash": "7f57e4af39f9",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-ncsc-nl-advisories": {
"kind": "source",
"zone": "research",
"title": "NCSC-NL: NCSC NL | Security Advisories (PHP banner: Ernstige kwetsbaarheden in PHP: bereid je voor op patchen)",
"path": "sources/ncsc-nl-advisories/index.html",
"hash": "9f6ba8ad7987",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-ncsc-nl-php2shell": {
"kind": "source",
"zone": "research",
"title": "NCSC-NL (Netherlands National Cyber Security Centre): NCSC-NL/php2shell: Operational information regarding the 2026 php2shell vulnerabilitie",
"path": "sources/ncsc-nl-php2shell/index.html",
"hash": "ad3b498ea1fc",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:48Z"
},
"src-ncsc-nl-php2shell-software-list": {
"kind": "source",
"zone": "research",
"title": "NCSC-NL (Netherlands National Cyber Security Centre): List of software with PHP dependency potentially affected by php2shell CVEs",
"path": "sources/ncsc-nl-php2shell-software-list/index.html",
"hash": "79301c376123",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:48Z"
},
"src-ncsc-nl-php2shell-software-list-letters": {
"kind": "source",
"zone": "research",
"title": "NCSC-NL: NCSC-NL php2shell software inventory, all 27 per-letter files (snapshot 18:36 UTC, 22 October 2026)",
"path": "sources/ncsc-nl-php2shell-software-list-letters/index.html",
"hash": "2fbd8614dc2d",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:36Z"
},
"src-ncsc-nl-site": {
"kind": "source",
"zone": "research",
"title": "ncsc.nl: Home | NCSC",
"path": "sources/ncsc-nl-site/index.html",
"hash": "bf452cf67d56",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-ncsc-nz-alert-php": {
"kind": "source",
"zone": "research",
"title": "NCSC New Zealand: UPDATED: CVE-2026-109618 and CVE-2026-109619 affecting PHP",
"path": "sources/ncsc-nz-alert-php/index.html",
"hash": "d116d717a837",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:17Z"
},
"src-ncsc-nz-alerts": {
"kind": "source",
"zone": "research",
"title": "NCSC New Zealand: Alerts listing",
"path": "sources/ncsc-nz-alerts/index.html",
"hash": "bf9b89a8b8ab",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-netzpolitik-2026-wir-stehen-auf-den-schultern-vieler": {
"kind": "source",
"zone": "research",
"title": "Netzpolitik.org: PHP-Sicherheitslücken: Wir stehen auf den Schultern vieler kleiner Giganten - netzpolitik.org",
"path": "sources/netzpolitik-2026-wir-stehen-auf-den-schultern-vieler/index.html",
"hash": "6af075414755",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-24T13:34Z"
},
"src-news-bitcoin-es-security-coinbase-y-bitgo-niegan-impa": {
"kind": "source",
"zone": "research",
"title": "Bitcoin News: Coinbase y Bitgo niegan impacto por vulnerabilidad de PHP; CZ alerta - Bitcoin News",
"path": "sources/news-bitcoin-es-security-coinbase-y-bitgo-niegan-impa/index.html",
"hash": "d168afc0d81d",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-news-clearancejobs-2026-10-23-php2shell-could-put-millions": {
"kind": "source",
"zone": "research",
"title": "ClearanceJobs News: PHP2Shell Could Put Millions of Websites at Risk: NSA Urges Immediate Patching - ClearanceJobs",
"path": "sources/news-clearancejobs-2026-10-23-php2shell-could-put-millions/index.html",
"hash": "9789e95d9c99",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-news-jkn-editions-thai-post-1040742": {
"kind": "source",
"zone": "research",
"title": "재경일보: เตือนภัยช่องโหว่ความปลอดภัย PHP เสี่ยงถูกรันโค้ดระยะไกลโดยไม่ต้องยืนยันตัวตน : 테크/과학 : JKN",
"path": "sources/news-jkn-editions-thai-post-1040742/index.html",
"hash": "04ce57c050a3",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-23T16:04Z"
},
"src-news-qq-rain-a-20261021a0eq4p00": {
"kind": "source",
"zone": "research",
"title": "腾讯网: PHP2Shell 高危漏洞补丁紧急发布，我在流量设备里发现了什么？_腾讯新闻",
"path": "sources/news-qq-rain-a-20261021a0eq4p00/index.html",
"hash": "bc544082570b",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-news-yahoo-articles-d953e2a13109253ae974bf2a64ebe94": {
"kind": "source",
"zone": "research",
"title": "Yahoo!ニュース: 【図解】重大な脆弱性が見つかった「PHP」とは？（Yahoo!ニュース オリジナル THE PAGE）",
"path": "sources/news-yahoo-articles-d953e2a13109253ae974bf2a64ebe94/index.html",
"hash": "55aa029e307b",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-news9live-technology-tech-news-what-is-php2shell-c": {
"kind": "source",
"zone": "research",
"title": "News9Live: What is PHP2Shell? Critical PHP flaws put millions of websites on emergency patch alert",
"path": "sources/news9live-technology-tech-news-what-is-php2shell-c/index.html",
"hash": "53465443c103",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-newscast-smart-news-4327997": {
"kind": "source",
"zone": "research",
"title": "NEWSCAST: PHPセキュリティ延長保守サービス、 PHP2Shellの修正を保守終了版PHP 5.3～8.1に提供 | NEWSCAST",
"path": "sources/newscast-smart-news-4327997/index.html",
"hash": "6dcb04893abe",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-newscj-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "천지일보: PHP 취약점 발견에 비상대응 가동… 정부 전산망엔 이상 없어 < IT·전자·과학 < 경제 < 기사본문 - 여론조사에 강한 신문- 천지일보",
"path": "sources/newscj-news-articleview-html/index.html",
"hash": "1213209bc769",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-newstap-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "뉴스탭: 인증 없이 서버 장악 가능…티오리, 치명적 PHP 취약점 ‘PHP2Shell’ 대응책 공개 < no_feed < 컴퓨팅/AI < 뉴스 < 기사본문 - 뉴스탭",
"path": "sources/newstap-news-articleview-html/index.html",
"hash": "3a766cc29a02",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-newsweek-php2shell-list": {
"kind": "source",
"zone": "research",
"title": "newsweek.com: PHP Vulnerability: List of Websites Powered by PHP as Hacker Threat Prompts Scramble - Newsweek",
"path": "sources/newsweek-php2shell-list/index.html",
"hash": "c0acf5e7e081",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:13Z"
},
"src-newsweek-php2shell-websites": {
"kind": "source",
"zone": "research",
"title": "Newsweek: PHP Vulnerability: List of Websites Powered by PHP as Hacker Threat Prompts Scramble - Newsweek",
"path": "sources/newsweek-php2shell-websites/index.html",
"hash": "0c1d20b037b5",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-nguoiquansat-lo-hong-php2shell-de-doa-70-website-toan": {
"kind": "source",
"zone": "research",
"title": "nguoiquansat.vn: Lỗ hổng php2shell đe dọa 70% website toàn cầu: Thủ tướng Nhật Bản thức trắng đêm phát lệnh báo động đỏ",
"path": "sources/nguoiquansat-lo-hong-php2shell-de-doa-70-website-toan/index.html",
"hash": "2883e012217c",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-niigata-nippo-articles-930995": {
"kind": "source",
"zone": "research",
"title": "新潟日報デジタルプラス: PHPの重大な脆弱性「PHP2shell」とは？ 企業サイトが今すぐ確認すべきこと　WACAが解説記事を公開 | 新潟日報",
"path": "sources/niigata-nippo-articles-930995/index.html",
"hash": "802eb4ed0c29",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-nl-beincrypto-crypto-exchange-hack-waarschuwing-php2sh": {
"kind": "source",
"zone": "research",
"title": "BeInCrypto: Crypto-exchange waarschuwing: kritieke PHP-kwetsbaarheid brengt betaalwebsites in gevaar",
"path": "sources/nl-beincrypto-crypto-exchange-hack-waarschuwing-php2sh/index.html",
"hash": "15afc8a8630c",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-24T13:34Z"
},
"src-note-gay-egret4207-n-n2c2499dc2998": {
"kind": "source",
"zone": "research",
"title": "note: 何年も使われたソフトのバグは、もう見つかっていると思っていないか——PHP2Shellで変わったのは「コード」ではなく「調べる力」だった｜yoshi",
"path": "sources/note-gay-egret4207-n-n2c2499dc2998/index.html",
"hash": "8807402ad0c9",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T08:03Z"
},
"src-note-masaland-n-n1bda3e5bc53f": {
"kind": "source",
"zone": "research",
"title": "note: [October 2026] What is PHP2Shell? How Generative AI is Shortening the 'Time' of Security｜Masaland",
"path": "sources/note-masaland-n-n1bda3e5bc53f/index.html",
"hash": "99798975f6c7",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T13:34Z"
},
"src-notebookcheck-cn-php2shell-php-1433819-0-html": {
"kind": "source",
"zone": "research",
"title": "notebookcheck-cn: PHP2Shell 波及数百万台服务器，所用 PHP 版本无官方修复补丁 - Notebookcheck-cn.com News",
"path": "sources/notebookcheck-cn-php2shell-php-1433819-0-html/index.html",
"hash": "5192005cd238",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-notebookcheck-info-php2shell-deixa-milhoes-de-servidores-em": {
"kind": "source",
"zone": "research",
"title": "notebookcheck: PHP2Shell deixa milhões de servidores em versões do PHP sem correção oficial - NotebookCheck.info News",
"path": "sources/notebookcheck-info-php2shell-deixa-milhoes-de-servidores-em/index.html",
"hash": "e7e15cdfe57d",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-26T12:14Z"
},
"src-notebookcheck-php2shell-co-powinni-sprawdzic-uzytkowni": {
"kind": "source",
"zone": "research",
"title": "notebookcheck: PHP2Shell: Co powinni sprawdzić użytkownicy QNAP, Nextcloud i OPNsense - Notebookcheck.pl",
"path": "sources/notebookcheck-php2shell-co-powinni-sprawdzic-uzytkowni/index.html",
"hash": "6140b5e640de",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T23:25Z"
},
"src-notebookcheck-php2shell-im-homelab-qnap-nextcloud-und": {
"kind": "source",
"zone": "research",
"title": "Notebookcheck: PHP2Shell im Homelab: QNAP, Nextcloud und OPNsense jetzt prüfen - Notebookcheck News",
"path": "sources/notebookcheck-php2shell-im-homelab-qnap-nextcloud-und/index.html",
"hash": "40448f2d2c93",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-notebookcheck-php2shell-kritieke-php-kwetsbaarheden-tr": {
"kind": "source",
"zone": "research",
"title": "notebookcheck: PHP2Shell: Kritieke PHP-kwetsbaarheden treffen mod_php-servers het hardst - Notebookcheck.nl Nieuws",
"path": "sources/notebookcheck-php2shell-kritieke-php-kwetsbaarheden-tr/index.html",
"hash": "f21d6e0a7bfc",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-25T09:35Z"
},
"src-notebookcheck-php2shell-laisse-des-millions-de-serveur": {
"kind": "source",
"zone": "research",
"title": "Notebookcheck: PHP2Shell laisse des millions de serveurs sous des versions de PHP sans correctif officiel - NotebookCheck.biz News",
"path": "sources/notebookcheck-php2shell-laisse-des-millions-de-serveur/index.html",
"hash": "4a66d512bd01",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T07:11Z"
},
"src-notebookcheck-php2shell-le-falle-critiche-di-php-colpi": {
"kind": "source",
"zone": "research",
"title": "Notebookcheck.it: PHP2Shell: le falle critiche di PHP colpiscono soprattutto i server mod_php - NotebookCheck.it News",
"path": "sources/notebookcheck-php2shell-le-falle-critiche-di-php-colpi/index.html",
"hash": "77b1f02ce421",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-notebookcheck-php2shell-what-qnap-nextcloud-and-opnsen": {
"kind": "source",
"zone": "research",
"title": "Notebookcheck: PHP2Shell: What QNAP, Nextcloud and OPNsense users should check - Notebookcheck Review",
"path": "sources/notebookcheck-php2shell-what-qnap-nextcloud-and-opnsen/index.html",
"hash": "821a87b851d2",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-notimerica-ciencia-tecnologia-noticia-portaltic-ama": {
"kind": "source",
"zone": "research",
"title": "Notimérica: Portaltic.-Amazon detectó intentos de explotación de PHP2Shell días antes de que se divulgaran las vulnerabilidades y su parche",
"path": "sources/notimerica-ciencia-tecnologia-noticia-portaltic-ama/index.html",
"hash": "bfcb81726de9",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-24T08:37Z"
},
"src-npr-2026-10-24-nx-s1-6012327-ai-found-the-fl": {
"kind": "source",
"zone": "research",
"title": "NPR: AI found the flaw. Hackers found the leak: The race to save 'PHP2SHELL' : NPR",
"path": "sources/npr-2026-10-24-nx-s1-6012327-ai-found-the-fl/index.html",
"hash": "18c52f89dac2",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-24T16:05Z"
},
"src-nsa-press-php-4630238": {
"kind": "source",
"zone": "research",
"title": "US National Security Agency (NSA): NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities",
"path": "sources/nsa-press-php-4630238/index.html",
"hash": "6f14574bd31b",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-nsa-x-2112903220209098897": {
"kind": "source",
"zone": "research",
"title": "NSA Cybersecurity (@NSACyber): NSA Cyber on X: Effective Immediately ... two critical vulnerabilities",
"path": "sources/nsa-x-2112903220209098897/index.html",
"hash": "4cc134a0482c",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-nsa-x-2113068811058622971": {
"kind": "source",
"zone": "research",
"title": "NSA Cybersecurity (@NSACyber): NSA Cyber on X: UPDATE: Specific mitigation guidance ... now available",
"path": "sources/nsa-x-2113068811058622971/index.html",
"hash": "aeaf8cc959ed",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-nsa-x-nsacyber": {
"kind": "source",
"zone": "research",
"title": "NSA Cybersecurity (@NSACyber): NSA Cyber (@NSACyber) / X profile timeline",
"path": "sources/nsa-x-nsacyber/index.html",
"hash": "409e922f4824",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-nsa-x-nsacyber-nitter": {
"kind": "source",
"zone": "research",
"title": "nitter.net: nitter.net (shutdown notice, no tweets)",
"path": "sources/nsa-x-nsacyber-nitter/index.html",
"hash": "f33d08ce3c61",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-nukib-aktuality-2470": {
"kind": "source",
"zone": "research",
"title": "NÚKIB: Národní úřad pro kybernetickou a informační bezpečnost - NÚKIB upozorňuje na kritické zranitelnosti v PHP - jediným řešením je aktual",
"path": "sources/nukib-aktuality-2470/index.html",
"hash": "a3b171356660",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:14Z"
},
"src-nvd-cve-2026-109618": {
"kind": "source",
"zone": "research",
"title": "NIST National Vulnerability Database: NVD - CVE-2026-109618",
"path": "sources/nvd-cve-2026-109618/index.html",
"hash": "6cc034e797a8",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:13Z"
},
"src-nvd-cve-2026-109619": {
"kind": "source",
"zone": "research",
"title": "NIST National Vulnerability Database: NVD - CVE-2026-109619",
"path": "sources/nvd-cve-2026-109619/index.html",
"hash": "95c992ab8a8b",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:12Z"
},
"src-nw-nachrichten-zwischen-weser-und-rhein-244": {
"kind": "source",
"zone": "research",
"title": "Neue Westfälische: Gravierende Sicherheitslücke bei PHP: Viele Webseiten aus OWL wieder online | nw.de",
"path": "sources/nw-nachrichten-zwischen-weser-und-rhein-244/index.html",
"hash": "7eefedf219cb",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-okaz-technology-na-2272170": {
"kind": "source",
"zone": "research",
"title": "عكاظ: ثغرتان خطيرتان في «PHP» تهددان ملايين المواقع على الإنترنت - أخبار السعودية | صحيفة عكاظ",
"path": "sources/okaz-technology-na-2272170/index.html",
"hash": "c573cace7b2e",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-24T13:34Z"
},
"src-openaccessgovernment-ncsc-issues-warning-over-critical-php-re": {
"kind": "source",
"zone": "research",
"title": "Open Access Government: NCSC issues warning over critical PHP remote code execution vulnerabilities",
"path": "sources/openaccessgovernment-ncsc-issues-warning-over-critical-php-re/index.html",
"hash": "3fd3f85c366d",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T11:04Z"
},
"src-openai-blog-coordinated-disclosure": {
"kind": "source",
"zone": "research",
"title": "OpenAI: Patch the Planet: global response coordination as agents uncover critical vulnerabilities",
"path": "sources/openai-blog-coordinated-disclosure/index.html",
"hash": "d22caecc6af9",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:24Z"
},
"src-openai-community-php-flaws": {
"kind": "source",
"zone": "research",
"title": "OpenAI Developer Community (user 'sps', Leader): OpenAI models help researchers uncover critical PHP security flaws",
"path": "sources/openai-community-php-flaws/index.html",
"hash": "8332a9061705",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:17Z"
},
"src-openai-patch-the-planet-launch": {
"kind": "source",
"zone": "research",
"title": "OpenAI: Patch the Planet (launch announcement)",
"path": "sources/openai-patch-the-planet-launch/index.html",
"hash": "852473f15752",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:24Z"
},
"src-openwall-oss-security-109619-thread": {
"kind": "source",
"zone": "research",
"title": "oss-security list (replies: Aaron Rainbolt, Yves-Alexis Perez/Debian, Christian Fischer/Greenbone): Re: CVE-2026-109619 thread (21/16, 21/17",
"path": "sources/openwall-oss-security-109619-thread/index.html",
"hash": "3675c2e47d45",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"src-openwall-oss-security-2026-10-20-34": {
"kind": "source",
"zone": "research",
"title": "oss-security list (Alan Coopersmith, Oracle): Upcoming Critical PHP Security Release",
"path": "sources/openwall-oss-security-2026-10-20-34/index.html",
"hash": "2e2989e03e89",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:14Z"
},
"src-openwall-oss-security-2026-10-21-6": {
"kind": "source",
"zone": "research",
"title": "oss-security list (Jakub Zelenka, PHP security team): CVE-2026-109618: PHP 8.2–8.5 RCE via OOM corruption",
"path": "sources/openwall-oss-security-2026-10-21-6/index.html",
"hash": "508f604186d5",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:14Z"
},
"src-openwall-oss-security-2026-10-21-7": {
"kind": "source",
"zone": "research",
"title": "oss-security list (Jakub Zelenka, PHP security team): CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state",
"path": "sources/openwall-oss-security-2026-10-21-7/index.html",
"hash": "6eda7a3f1c0e",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:14Z"
},
"src-orf-stories-3445806": {
"kind": "source",
"zone": "research",
"title": "ORF: PHP-Lücke: Millionen Angriffsversuche im Netz - news.ORF.at",
"path": "sources/orf-stories-3445806/index.html",
"hash": "adf31fe302e1",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-ot-2026-10-23-texnologia-php2shell-enas-sto": {
"kind": "source",
"zone": "research",
"title": "Οικονομικός Ταχυδρόμος: PHP2Shell: Ένας στους δέκα οργανισμούς παγκοσμίως έχει ήδη επηρεαστεί - Οικονομικός Ταχυδρόμος - ot.gr",
"path": "sources/ot-2026-10-23-texnologia-php2shell-enas-sto/index.html",
"hash": "9657ab77307f",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T23:25Z"
},
"src-ototekno-harianjogja-r-1276080-php2shell-bisa-curi-data-websi": {
"kind": "source",
"zone": "research",
"title": "Berita Oto Tekno - Harianjogja.com: PHP2Shell Bisa Curi Data Website, Kenali Tanda Server Diretas",
"path": "sources/ototekno-harianjogja-r-1276080-php2shell-bisa-curi-data-websi/index.html",
"hash": "d6b6b9bc9bd5",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T13:34Z"
},
"src-overheid-nl-site": {
"kind": "source",
"zone": "research",
"title": "overheid.nl: Homepage | Overheid.nl",
"path": "sources/overheid-nl-site/index.html",
"hash": "d95a85f70b53",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-oxfordchronicle-councils-offline": {
"kind": "source",
"zone": "research",
"title": "Oxford Chronicle: Oxfordshire council websites offline amid critical global security issue | Oxford Chronicle",
"path": "sources/oxfordchronicle-councils-offline/index.html",
"hash": "500a16ab314f",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:29Z"
},
"src-paloalto-psirt-cve-2026-109618": {
"kind": "source",
"zone": "research",
"title": "Palo Alto Networks: CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Produ",
"path": "sources/paloalto-psirt-cve-2026-109618/index.html",
"hash": "19a08f99c69d",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:17Z"
},
"src-paperjam-article-php2shell-des-milliers-de-sites": {
"kind": "source",
"zone": "research",
"title": "Paperjam: PHP2Shell: des milliers de sites exposés au Luxembourg | Paperjam News",
"path": "sources/paperjam-article-php2shell-des-milliers-de-sites/index.html",
"hash": "4f992c93e76c",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-patchtheplanet-org": {
"kind": "source",
"zone": "research",
"title": "OpenAI (Patch the Planet / Daybreak): Patch the Planet — OpenAI",
"path": "sources/patchtheplanet-org/index.html",
"hash": "b7783c9cb09a",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-pc-watch-impress-docs-news-2150338-html": {
"kind": "source",
"zone": "research",
"title": "PC Watch: 深刻度9.2のPHP脆弱性「PHP2Shell」、OpenAIが影響確認ツール公開 - PC Watch",
"path": "sources/pc-watch-impress-docs-news-2150338-html/index.html",
"hash": "2bf39878691a",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-pcgamer-wikipedia-ref-22-dates-to-plug-leaked-hi": {
"kind": "source",
"zone": "research",
"title": "PC Gamer: 'We expect mass attacks to start within 15 minutes of the release': Web admins braced for emergency PHP updates to plug leaked hig",
"path": "sources/pcgamer-wikipedia-ref-22-dates-to-plug-leaked-hi/index.html",
"hash": "5748b5c82b9a",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-25T11:45Z"
},
"src-pcmag-news-hackers-already-trying-to-exploit-serious-php-flaw": {
"kind": "source",
"zone": "research",
"title": "PCMag: Hackers Already Trying to Exploit Serious PHP Flaw | PCMag",
"path": "sources/pcmag-news-hackers-already-trying-to-exploit-serious-php-flaw/index.html",
"hash": "d5d8edb7647c",
"v": 2,
"first": "0.10.19",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-pcmag-wikipedia-ref-31-s-should-consider-going": {
"kind": "source",
"zone": "research",
"title": "PCMag: This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says | PCMag",
"path": "sources/pcmag-wikipedia-ref-31-s-should-consider-going/index.html",
"hash": "f1e29a8fc6f6",
"v": 1,
"first": "0.22.24",
"changed": "0.22.24",
"date": "2026-10-25T11:45Z"
},
"src-peterboroughtoday-must-read-astra-security-launches-free-t": {
"kind": "source",
"zone": "research",
"title": "Peterborough Telegraph: Astra Security launches free tools to help organisations identify PHP2Shell vulnerabilities",
"path": "sources/peterboroughtoday-must-read-astra-security-launches-free-t/index.html",
"hash": "24d30f033fee",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-24T08:37Z"
},
"src-php-foundation-blog-security-release": {
"kind": "source",
"zone": "research",
"title": "The PHP Foundation: Today's PHP Security Release, and How We're Strengthening PHP Security",
"path": "sources/php-foundation-blog-security-release/index.html",
"hash": "b5a04c66d889",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-php-net-advisory": {
"kind": "source",
"zone": "research",
"title": "PHP Group (php.net): Security advisory: Critical remote code execution vulnerabilities, update now",
"path": "sources/php-net-advisory/index.html",
"hash": "409314168cff",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:09Z"
},
"src-php-net-changelog-8": {
"kind": "source",
"zone": "research",
"title": "PHP Group (php.net): PHP 8 ChangeLog",
"path": "sources/php-net-changelog-8/index.html",
"hash": "e87dc483ab2e",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:15Z"
},
"src-php2shell-com": {
"kind": "source",
"zone": "research",
"title": "OpenAI / Wiz / Calif joint microsite (php2shell.com): PHP2Shell — AI uncovers critical vulnerabilities in the backbone of the web",
"path": "sources/php2shell-com/index.html",
"hash": "a945fbcbfb97",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-phparch-php-security-2025-audit": {
"kind": "source",
"zone": "research",
"title": "php[architect]: PHP Security in 2025: Lessons from the Core Security Audit | PHP Architect",
"path": "sources/phparch-php-security-2025-audit/index.html",
"hash": "05dc62fa0b60",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:29Z"
},
"src-phpfoundation-blog-security-release-leak": {
"kind": "source",
"zone": "research",
"title": "The PHP Foundation: Today's PHP Security Release, and How We're Strengthening PHP Security",
"path": "sources/phpfoundation-blog-security-release-leak/index.html",
"hash": "e5b7cf0d0990",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:12Z"
},
"src-phpocalypse-tracker-sites-csv": {
"kind": "source",
"zone": "research",
"title": "PHPocalypse Tracker (allixsenos): PHPocalypse Tracker (allixsenos)",
"path": "sources/phpocalypse-tracker-sites-csv/index.html",
"hash": "2097c0b0efd2",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:36Z"
},
"src-pl-beincrypto-alarm-wlamania-na-gielde-kryptowalut-ryz": {
"kind": "source",
"zone": "research",
"title": "BeInCrypto Polska: Ostrzeżenie dla giełd kryptowalut: krytyczna luka PHP naraża serwisy płatnicze na ryzyko",
"path": "sources/pl-beincrypto-alarm-wlamania-na-gielde-kryptowalut-ryz/index.html",
"hash": "4cf31c93e665",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-24T13:34Z"
},
"src-pl-martincid-technology-pl-php2shell-latka-php-juz-je": {
"kind": "source",
"zone": "research",
"title": "pl.martincid: PHP2Shell: łatka PHP już jest, ale strony na WordPressie muszą czekać na hostingodawcę – Martin Cid Magazine PL",
"path": "sources/pl-martincid-technology-pl-php2shell-latka-php-juz-je/index.html",
"hash": "ea571fd2ba36",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-24T08:37Z"
},
"src-polinews-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "폴리뉴스 Polinews: [종합] 靑, PHP 사이버 보안비상에 민관군 긴급회의…국내 취약 자산 11만건 추정 < 이슈기획 < 오피니언·이슈 < 기사본문 - 폴리뉴스 Polinews",
"path": "sources/polinews-news-articleview-html/index.html",
"hash": "890440f06541",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-polskieradio24-pieniadze-strony-bip-znikaja-z-sieci-luk": {
"kind": "source",
"zone": "research",
"title": "Polskie Radio 24: Strony BIP znikają z sieci. Luka PHP pozwala przejmować serwery. Co dalej?",
"path": "sources/polskieradio24-pieniadze-strony-bip-znikaja-z-sieci-luk/index.html",
"hash": "f697bcd4c9ad",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-posttoday-ai-today-750820": {
"kind": "source",
"zone": "research",
"title": "โพสต์ทูเดย์: เตือนภัยช่องโหว่ PHP2Shell ภาครัฐเร่งยกระดับความปลอดภัยไซเบอร์",
"path": "sources/posttoday-ai-today-750820/index.html",
"hash": "88d459d086f5",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-pplware-sapo-internet-php2shell-disponibilizadas-atua": {
"kind": "source",
"zone": "research",
"title": "Pplware: PHP2Shell: disponibilizadas atualizações urgentes para corrigir duas falhas críticas",
"path": "sources/pplware-sapo-internet-php2shell-disponibilizadas-atua/index.html",
"hash": "b021aae2cc0d",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-prefecture-police-site": {
"kind": "source",
"zone": "research",
"title": "prefecturedepolice.interieur.gouv.fr: Page accueil | Préfecture de Police",
"path": "sources/prefecture-police-site/index.html",
"hash": "020b6cf7cfce",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-pressebox-pressemitteilung-scalecommerce-gmbh-krit": {
"kind": "source",
"zone": "research",
"title": "PresseBox: Kritische PHP-Sicherheitslücke: ScaleCommerce patcht alle Kundinnen und Kunden binnen weniger Minuten – auch PHP-Versionen ohne o",
"path": "sources/pressebox-pressemitteilung-scalecommerce-gmbh-krit/index.html",
"hash": "2b9f4c3d01aa",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-prophetsecurity-php2shell-detect": {
"kind": "source",
"zone": "research",
"title": "Prophet Security: php2shell: Detecting and Investigating CVE-2026-109618 and CVE-2026-109619 | Prophet Security",
"path": "sources/prophetsecurity-php2shell-detect/index.html",
"hash": "451da7eff3f0",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-prtimes-main-html-rd-p-000000090-000072250-html": {
"kind": "source",
"zone": "research",
"title": "PR TIMES: Cohesity、PHPの深刻な脆弱性「PHP2Shell」の影響と企業が講じるべき対策を解説 | Cohesity Japan株式会社のプレスリリース",
"path": "sources/prtimes-main-html-rd-p-000000090-000072250-html/index.html",
"hash": "c0bd77c00003",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-26T12:14Z"
},
"src-public25-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "공생공사닷컴: 로그프레소, PHP 취약점 진단 스캐너 공개…내부망까지 점검 < 퍼블릭경제 < 공공&경제 < 기사본문 - 퍼블릭타임스",
"path": "sources/public25-news-articleview-html/index.html",
"hash": "c6a77b7da61c",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-qa-financial-php-security-crisis-raises-testing-stake": {
"kind": "source",
"zone": "research",
"title": "QA Financial: PHP security crisis raises testing stakes for banks - QA Financial",
"path": "sources/qa-financial-php-security-crisis-raises-testing-stake/index.html",
"hash": "11888894e19b",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-qdnd-phap-luat-tin-tuc-hai-lo-hong-nghiem-tro": {
"kind": "source",
"zone": "research",
"title": "Báo Quân đội nhân dân: Hai lỗ hổng nghiêm trọng trong PHP đã có bản vá",
"path": "sources/qdnd-phap-luat-tin-tuc-hai-lo-hong-nghiem-tro/index.html",
"hash": "6c159d64c322",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-24T08:37Z"
},
"src-qnap-qsa-26-18": {
"kind": "source",
"zone": "research",
"title": "QNAP: Vulnerabilities in PHP (PHP2Shell) Affecting Multiple QNAP Products - Security Advisory | QNAP",
"path": "sources/qnap-qsa-26-18/index.html",
"hash": "6ad9f0d0e209",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:17Z"
},
"src-qnap-statement-php2shell": {
"kind": "source",
"zone": "research",
"title": "QNAP: QNAP Statement on Critical PHP Vulnerabilities (PHP2Shell): Assessment and Mitigation Guidance | QNAP",
"path": "sources/qnap-statement-php2shell/index.html",
"hash": "15dbf7eb0f51",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:17Z"
},
"src-qualys-blog-php-preannounce": {
"kind": "source",
"zone": "research",
"title": "Qualys: 403 Forbidden",
"path": "sources/qualys-blog-php-preannounce/index.html",
"hash": "702ee5d62280",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:30Z"
},
"src-quarkslab-blog-php-src-audit": {
"kind": "source",
"zone": "research",
"title": "Quarkslab: Security audit of PHP-SRC - Quarkslab's blog",
"path": "sources/quarkslab-blog-php-src-audit/index.html",
"hash": "4d70a55c67ac",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:30Z"
},
"src-ra2ej-php2shell-893716-html": {
"kind": "source",
"zone": "research",
"title": "رائج: ثغرتان حرجتان في لغة بي إتش بي تدفعان حكومات ومؤسسات إلى إغلاق مواقعها: ما هي PHP2Shell وماذا تعني للمستخدم العادي؟",
"path": "sources/ra2ej-php2shell-893716-html/index.html",
"hash": "52f10947fc22",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-radioworld-tech-and-gear-radio-it-management-is-you": {
"kind": "source",
"zone": "research",
"title": "Radio World: Is Your Manufacturer Affected by the PHP Vulnerability? - Radio World",
"path": "sources/radioworld-tech-and-gear-radio-it-management-is-you/index.html",
"hash": "4dd790df508e",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-24T13:34Z"
},
"src-raya-2026-10-22-php": {
"kind": "source",
"zone": "research",
"title": "جريدة الراية: ثغرتان خطيرتان في PHP تهددان خوادم المواقع - جريدة الراية",
"path": "sources/raya-2026-10-22-php/index.html",
"hash": "e6c4012840b5",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-rbbtoday-release-prtimes2-today-20261022-1383966": {
"kind": "source",
"zone": "research",
"title": "RBB TODAY: PHPに深刻度9.2の緊急脆弱性「php2shell」発覚、WordPressサイト運営企業向けの対策チェックリストをTorchUpが無料公開 - PR TIMES｜RBB TODAY",
"path": "sources/rbbtoday-release-prtimes2-today-20261022-1383966/index.html",
"hash": "046ef4184e5f",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-recordedfuture-php2shell": {
"kind": "source",
"zone": "research",
"title": "Recorded Future: PHP2Shell Exploitation: Two Critical PHP Flaws Explained",
"path": "sources/recordedfuture-php2shell/index.html",
"hash": "4c890f5395eb",
"v": 3,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-repubblica-tecnologia-2026-10-21-news-php2shell-ia": {
"kind": "source",
"zone": "research",
"title": "la Repubblica: PHP2Shell, l’IA svela due falle critiche nel web - la Repubblica",
"path": "sources/repubblica-tecnologia-2026-10-21-news-php2shell-ia/index.html",
"hash": "ddf86b1f66cb",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-reuters-factbox-gbaf": {
"kind": "source",
"zone": "research",
"title": "globalbankingandfinance.com: Major European Websites Offline Amid Critical PHP Security Flaws",
"path": "sources/reuters-factbox-gbaf/index.html",
"hash": "82a51bde887a",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:10Z"
},
"src-reuters-factbox-websites-offline": {
"kind": "source",
"zone": "research",
"title": "Reuters factbox, via Global Banking and Finance: Global Websites Offline Amid PHP Security Flaws: Finance Sector Impact",
"path": "sources/reuters-factbox-websites-offline/index.html",
"hash": "2be8ed1a62ee",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-rijksoverheid-ncsc-php-news": {
"kind": "source",
"zone": "research",
"title": "Rijksoverheid (Dutch government) / NCSC-NL: NCSC: Ernstige kwetsbaarheden in PHP | Rijksoverheid.nl",
"path": "sources/rijksoverheid-ncsc-php-news/index.html",
"hash": "73abd4dabcf8",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:30Z"
},
"src-rocket-boys-security-measures-lab-php2shell-poc-expl": {
"kind": "source",
"zone": "research",
"title": "合同会社ロケットボーイズ: PHP2Shell(CVE-2026-109618／CVE-2026-109619)のPoCがGitHubで急増、27件を確認 Amazonは公表4日前からサイバー攻撃の試行を観測|セキュリティとITのニュース-セキュリティ対策Lab",
"path": "sources/rocket-boys-security-measures-lab-php2shell-poc-expl/index.html",
"hash": "36f0712314e0",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-root-zpravicky-utok-na-php2shell-zacal-uz-cty": {
"kind": "source",
"zone": "research",
"title": "Root.cz: Útok na PHP2Shell začal už čtyři dny před zveřejněním zranitelností, tvrdí Amazon - Root.cz",
"path": "sources/root-zpravicky-utok-na-php2shell-zacal-uz-cty/index.html",
"hash": "0f2a2009bcf0",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-rte-reuters-websites-go-dark": {
"kind": "source",
"zone": "research",
"title": "rte.ie: Websites go dark as AI exposes critical security flaws",
"path": "sources/rte-reuters-websites-go-dark/index.html",
"hash": "3b34b468ba83",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:10Z"
},
"src-rtl-leben-digitales-php-luecke-bsi-warnt-vor-cyber-gefahr-fi": {
"kind": "source",
"zone": "research",
"title": "RTL.de: PHP-Lücke: BSI warnt vor Cyber-Gefahr – Firmen oft unwissend",
"path": "sources/rtl-leben-digitales-php-luecke-bsi-warnt-vor-cyber-gefahr-fi/index.html",
"hash": "bd794105c317",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-rtve-noticias-20261022-fallos-criticos-php2shell-vulnerabili": {
"kind": "source",
"zone": "research",
"title": "RTVE.es: Alerta por fallos críticos en PHP: riesgo en servidores web",
"path": "sources/rtve-noticias-20261022-fallos-criticos-php2shell-vulnerabili/index.html",
"hash": "640a49c10e4b",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-safeguard-how-hard-to-exploit": {
"kind": "source",
"zone": "research",
"title": "Safeguard (vendor blog): PHP2Shell: How Hard Is It to Exploit, and What PHP Is Changing | Safeguard Blog",
"path": "sources/safeguard-how-hard-to-exploit/index.html",
"hash": "e864efcbdb7a",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-safeguard-waf-rules-limits": {
"kind": "source",
"zone": "research",
"title": "Safeguard (vendor blog): PHP2Shell WAF rules: what they block and where they fall short | Safeguard Blog",
"path": "sources/safeguard-waf-rules-limits/index.html",
"hash": "6ca5cb8b6aae",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-salzburg24-news-oesterreich-massive-sache-folgen-der-php-sic": {
"kind": "source",
"zone": "research",
"title": "salzburg24: \"Massive Sache\": Folgen der PHP-Sicherheitslücke für heimische Wirtschaft noch unklar - Salzburg24.at",
"path": "sources/salzburg24-news-oesterreich-massive-sache-folgen-der-php-sic/index.html",
"hash": "7b64c9f8f9e3",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-sankei-dmm-service-halt": {
"kind": "source",
"zone": "research",
"title": "産経ニュース: エンタメサイトDMMがサービス停止、外部システムの脆弱性への対応　「情報漏洩は無し」 - 産経ニュース",
"path": "sources/sankei-dmm-service-halt/index.html",
"hash": "3bdae7c707b1",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:15Z"
},
"src-sankei-pressrelease-prtimes-ec2547367bpozjzxed6": {
"kind": "source",
"zone": "research",
"title": "産経ニュース: PHP重大脆弱性「PHP2Shell」に対応。ALION、他社開発のWordPress・PHPシステムを10万円からスポット支援 - 産経ニュース",
"path": "sources/sankei-pressrelease-prtimes-ec2547367bpozjzxed6/index.html",
"hash": "d98e8d0ff132",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-sansec-research-php2shell": {
"kind": "source",
"zone": "research",
"title": "Sansec: PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) | Sansec",
"path": "sources/sansec-research-php2shell/index.html",
"hash": "19b249735286",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-sbbit-article-cont1-187672": {
"kind": "source",
"zone": "research",
"title": "ビジネス+IT: 【高市総理も注意喚起】インターネット崩壊危機？PHP重大脆弱性でWebサイト緊急停止 世界のWebサイトの約7割で利用、国内サービスも緊急メンテナンス｜ビジネス+IT",
"path": "sources/sbbit-article-cont1-187672/index.html",
"hash": "b3e042ca5372",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-scherzer-dev-wikipedia-ref-15-blog-20261022-php2shell": {
"kind": "source",
"zone": "research",
"title": "scherzer.dev: Blog: PHP2Shell: a Timeline",
"path": "sources/scherzer-dev-wikipedia-ref-15-blog-20261022-php2shell/index.html",
"hash": "b3bba9996187",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-25T11:45Z"
},
"src-schieb-php2shell-sicherheitsluecke-so-schuetzt": {
"kind": "source",
"zone": "research",
"title": "schieb.de: PHP2Shell-Sicherheitslücke: So schützt ihr eure Webanwendungen",
"path": "sources/schieb-php2shell-sicherheitsluecke-so-schuetzt/index.html",
"hash": "22c25716e74d",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T09:40Z"
},
"src-scotsman-edinburgh-council": {
"kind": "source",
"zone": "research",
"title": "scotsman.com: Edinburgh council website offline amid global cyber security alert",
"path": "sources/scotsman-edinburgh-council/index.html",
"hash": "e2c36ead86de",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:10Z"
},
"src-scotsman-edinburgh-council-offline": {
"kind": "source",
"zone": "research",
"title": "The Scotsman (Jack Davies): Edinburgh council website offline amid global cyber security alert",
"path": "sources/scotsman-edinburgh-council-offline/index.html",
"hash": "902d63addf67",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:21Z"
},
"src-security-nl-kamervragen": {
"kind": "source",
"zone": "research",
"title": "Security.NL: Kamervragen over offline halen van overheidswebsites wegens PHP2Shell - Security.NL",
"path": "sources/security-nl-kamervragen/index.html",
"hash": "1e3e045213f6",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-security-nl-palo-alto-firewalls": {
"kind": "source",
"zone": "research",
"title": "Security.NL: Firewalls Palo Alto Networks kwetsbaar voor PHP2Shell, Cisco en Fortinet onderzoeken - Security.NL",
"path": "sources/security-nl-palo-alto-firewalls/index.html",
"hash": "aeb9cfee63b8",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-23T16:04Z"
},
"src-security-nl-qnap-nas-offline": {
"kind": "source",
"zone": "research",
"title": "Security.NL: QNAP adviseert offline halen NAS-systemen wegens PHP2Shell - Security.NL",
"path": "sources/security-nl-qnap-nas-offline/index.html",
"hash": "50fe32513d02",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-23T16:04Z"
},
"src-securityaffairs-201662-hacking-pierluigi-paganini-answer": {
"kind": "source",
"zone": "research",
"title": "Security Affairs: Pierluigi Paganini answers questions about the PHP2Shell flaws",
"path": "sources/securityaffairs-201662-hacking-pierluigi-paganini-answer/index.html",
"hash": "0b810726a767",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-securitynl-misbruik-gemeld": {
"kind": "source",
"zone": "research",
"title": "Security.NL: Misbruik van PHP2Shell-lek gemeld, DigiD en andere sites weer online - Security.NL",
"path": "sources/securitynl-misbruik-gemeld/index.html",
"hash": "9ba0d27da4be",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:14Z"
},
"src-securityweek-exploitation-days-before": {
"kind": "source",
"zone": "research",
"title": "SecurityWeek: PHP2Shell Exploitation Started Days Before Patches - SecurityWeek",
"path": "sources/securityweek-exploitation-days-before/index.html",
"hash": "92dd71e5ebdf",
"v": 3,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-securityweek-first-attempts-sensors": {
"kind": "source",
"zone": "research",
"title": "SecurityWeek: PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors - SecurityWeek",
"path": "sources/securityweek-first-attempts-sensors/index.html",
"hash": "f6ff38ff15eb",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-securityweek-mass-exploitation-looms": {
"kind": "source",
"zone": "research",
"title": "SecurityWeek: PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws - SecurityWeek",
"path": "sources/securityweek-mass-exploitation-looms/index.html",
"hash": "ca48bdd1ae01",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-selular-2026-10-ancaman-serangan-siber-php2shell": {
"kind": "source",
"zone": "research",
"title": "Selular.ID: Ancaman Serangan Siber PHP2Shell, Kemenperin Matikan Situs TKDN hingga 25 Oktober | Selular.ID",
"path": "sources/selular-2026-10-ancaman-serangan-siber-php2shell/index.html",
"hash": "0d46affe88a1",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-24T13:34Z"
},
"src-sempreupdate-php2shell-a-anatomia-das-vulnerabilidade": {
"kind": "source",
"zone": "research",
"title": "SempreUpdate: PHP2Shell: O colapso da botnet Mirai nas falhas RCE",
"path": "sources/sempreupdate-php2shell-a-anatomia-das-vulnerabilidade/index.html",
"hash": "419473368be8",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-24T08:37Z"
},
"src-sentinelone-php2shell": {
"kind": "source",
"zone": "research",
"title": "SentinelOne: Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique",
"path": "sources/sentinelone-php2shell/index.html",
"hash": "08db578b806b",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-seroundtable-google-php2shell-42353-html": {
"kind": "source",
"zone": "research",
"title": "Search Engine Roundtable: Google Advice On Taking Sites Down When Fixing PHP2Shell - The PHP Exploit",
"path": "sources/seroundtable-google-php2shell-42353-html/index.html",
"hash": "c60a46d15647",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T08:03Z"
},
"src-shattered-php2shell-attacks-began-4-days-before-di": {
"kind": "source",
"zone": "research",
"title": "shattered.io: PHP2Shell Exploited 4 Days Before Disclosure [2026]",
"path": "sources/shattered-php2shell-attacks-began-4-days-before-di/index.html",
"hash": "511c8613a63f",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-shinailbo-news-articleview-html": {
"kind": "source",
"zone": "research",
"title": "신아일보: PHP 취약점 발견, 전세계 해킹 '비상'…사이버위기 '주의'로 상향 < 정책 < 산업 < 기사본문 - 신아일보",
"path": "sources/shinailbo-news-articleview-html/index.html",
"hash": "0cbebbc1fabe",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-siamblockchain-2026-10-22-crypto-exchange-hack-alert-ph": {
"kind": "source",
"zone": "research",
"title": "Siam Blockchain: เว็บไซต์ปิดตัวทั่วโลก หลังพบช่องโหว่ PHP แพลตฟอร์มคริปโทฯ เสี่ยงได้รับผลกระทบ",
"path": "sources/siamblockchain-2026-10-22-crypto-exchange-hack-alert-ph/index.html",
"hash": "09da03905420",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-23T16:04Z"
},
"src-silicon-cybersecurite-1371-php2shell-vulnerabili": {
"kind": "source",
"zone": "research",
"title": "Silicon.fr: PHP2Shell : les correctifs arrivent, mais pas au même rythme",
"path": "sources/silicon-cybersecurite-1371-php2shell-vulnerabili/index.html",
"hash": "4f4ccedefc5b",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-24T13:34Z"
},
"src-siliconangle-2026-10-22-php2shell-attacks-began-four": {
"kind": "source",
"zone": "research",
"title": "SiliconANGLE: PHP2Shell attacks began four days before patches, Amazon says, as attempts hit millions - SiliconANGLE",
"path": "sources/siliconangle-2026-10-22-php2shell-attacks-began-four/index.html",
"hash": "cd82fbee4064",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-sn-panorama-medien-was-die-php-sicherheitsl": {
"kind": "source",
"zone": "research",
"title": "Salzburger Nachrichten: Was die PHP-Sicherheitslücke für das Internet bedeutet: Das Problem ist „riesig groß“ - SN.at",
"path": "sources/sn-panorama-medien-was-die-php-sicherheitsl/index.html",
"hash": "dceea956895b",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-24T16:05Z"
},
"src-socket-blog-embargo-dispute": {
"kind": "source",
"zone": "research",
"title": "Socket: Just a moment...",
"path": "sources/socket-blog-embargo-dispute/index.html",
"hash": "6b7acc7a31d5",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-socradar-blog-php2shell": {
"kind": "source",
"zone": "research",
"title": "SOCRadar: PHP2Shell CVE-2026-109618 & 109619: Affected Versions & Fix",
"path": "sources/socradar-blog-php2shell/index.html",
"hash": "d8827c124432",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-software-it168-a2026-1022-6954-000006954576-shtml": {
"kind": "source",
"zone": "research",
"title": "IT168 软件·学院: 360安全云发布PHP2Shell应急防护方案，助力政企网站抢修窗口期-互联网专区",
"path": "sources/software-it168-a2026-1022-6954-000006954576-shtml/index.html",
"hash": "dce3dd3a80ed",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-24T13:34Z"
},
"src-sohu-a-1091246810-122998307": {
"kind": "source",
"zone": "research",
"title": "搜狐: php2shell 漏洞刷屏，集运公司要不要连夜打补丁？先看系统用什么写的_影响_客户_代码执行",
"path": "sources/sohu-a-1091246810-122998307/index.html",
"hash": "e06d03488724",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-23T16:04Z"
},
"src-spacemoney-tecnologia-php2shell-falha-critica-php": {
"kind": "source",
"zone": "research",
"title": "SpaceMoney: PHP2Shell: falha crítica no PHP exige correção imediata",
"path": "sources/spacemoney-tecnologia-php2shell-falha-critica-php/index.html",
"hash": "77ad0bb3277a",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-23T16:04Z"
},
"src-stadt-bremerhaven-synology-sicherheitsupdates-fuer-php-geg": {
"kind": "source",
"zone": "research",
"title": "stadt bremerhaven: Synology: Sicherheitsupdates für PHP gegen PHP2Shell-Lücken",
"path": "sources/stadt-bremerhaven-synology-sicherheitsupdates-fuer-php-geg/index.html",
"hash": "2a6abf2308e6",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-23T16:04Z"
},
"src-startupfortune-cloudflares-ceo-says-worse-bugs-than-php": {
"kind": "source",
"zone": "research",
"title": "Startup Fortune: Cloudflare's CEO Says Worse Bugs Than PHP2Shell Are Already Being Patched - Startup Fortune",
"path": "sources/startupfortune-cloudflares-ceo-says-worse-bugs-than-php/index.html",
"hash": "66473f5e16bd",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-26T07:11Z"
},
"src-startupper-ai-282619-antepithesi-220-ekat-liron-apo": {
"kind": "source",
"zone": "research",
"title": "startupper: PHP2Shell: Παγκόσμιος συναγερμός και «ένεση» 220 εκατ. λιρών από τη Βρετανία για AI Safety - STARTUPPER",
"path": "sources/startupper-ai-282619-antepithesi-220-ekat-liron-apo/index.html",
"hash": "1d7e75fdfb49",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-26T12:14Z"
},
"src-stephanelarue-sites-des-prefectures-inaccessibles-lint": {
"kind": "source",
"zone": "research",
"title": "Stéphane Larue News: Sites des préfectures inaccessibles : l'Intérieur les coupe à cause d'une faille PHP",
"path": "sources/stephanelarue-sites-des-prefectures-inaccessibles-lint/index.html",
"hash": "94ea3220cb6e",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-23T16:04Z"
},
"src-stock-10jqka-20261022-c680990008-shtml": {
"kind": "source",
"zone": "research",
"title": "同花顺财经股票频道: “PHP2Shell”敲响企业漏洞警钟，奇安信天戟提供一键速查方案",
"path": "sources/stock-10jqka-20261022-c680990008-shtml/index.html",
"hash": "d96d4e2d4fef",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-suaranasional-2026-10-25-bahaya-celah-keamanan-php2she": {
"kind": "source",
"zone": "research",
"title": "Suara Nasional: Bahaya Celah Keamanan PHP2Shell: Komdigi Imbau Pengelola Website Segera Update PHP - Suara Nasional",
"path": "sources/suaranasional-2026-10-25-bahaya-celah-keamanan-php2she/index.html",
"hash": "4fd34f81310e",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-25T12:04Z"
},
"src-substack-lopezkurtz-patch-is-the-exploit": {
"kind": "source",
"zone": "research",
"title": "David Lopez-Kurtz (Substack): The Patch Is the Exploit - by David Lopez-Kurtz",
"path": "sources/substack-lopezkurtz-patch-is-the-exploit/index.html",
"hash": "034d4663e213",
"v": 2,
"first": "0.4.1",
"changed": "0.19.2",
"date": "2026-10-25"
},
"src-sueddeutsche-wirtschaft-php-sicherheitsluecke-2026-ph": {
"kind": "source",
"zone": "research",
"title": "SZ.de: PHP-Sicherheitslücke \"PHP2Shell\": Zwei kritische Lücken gefährden Webseiten weltweit - Wirtschaft - SZ.de",
"path": "sources/sueddeutsche-wirtschaft-php-sicherheitsluecke-2026-ph/index.html",
"hash": "f1123f0bac57",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-sunderlandecho-must-read-astra-security-launches-free-t": {
"kind": "source",
"zone": "research",
"title": "Sunderland Echo: Astra Security launches free tools to help organisations identify PHP2Shell vulnerabilities",
"path": "sources/sunderlandecho-must-read-astra-security-launches-free-t/index.html",
"hash": "7c4e4b82498b",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-sussexexpress-must-read-astra-security-launches-free-t": {
"kind": "source",
"zone": "research",
"title": "SussexWorld: Astra Security launches free tools to help organisations identify PHP2Shell vulnerabilities",
"path": "sources/sussexexpress-must-read-astra-security-launches-free-t/index.html",
"hash": "ce97578740a8",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-tagesanzeiger-php-sicherheitsluecke-millionen-hackeran": {
"kind": "source",
"zone": "research",
"title": "Tages-Anzeiger: PHP-Sicherheitslücke: Millionen Hackerangriffe weltweit",
"path": "sources/tagesanzeiger-php-sicherheitsluecke-millionen-hackeran/index.html",
"hash": "8544caf34012",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T08:03Z"
},
"src-tageskarte-technologie-detail-webseiten-in-gefahr-p": {
"kind": "source",
"zone": "research",
"title": "www.tageskarte.io: Webseiten in Gefahr: PHP-Sicherheitslücken zwingen Hoteliers und Gastronomen zum Handeln: Tageskarte",
"path": "sources/tageskarte-technologie-detail-webseiten-in-gefahr-p/index.html",
"hash": "f1b642f5b853",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-tagesschau-wirtschaft-digitales-php-panne-100-html": {
"kind": "source",
"zone": "research",
"title": "tagesschau.de: PHP-Bedrohung: Was über die Sicherheitslücke bekannt ist | tagesschau.de",
"path": "sources/tagesschau-wirtschaft-digitales-php-panne-100-html/index.html",
"hash": "e8223f726f8f",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-tagesspiegel-dpa-noch-offline": {
"kind": "source",
"zone": "research",
"title": "tagesspiegel.de: Sicherheitslücke: „Millionen“ Hacker-Versuche: Viele Webseiten noch offline",
"path": "sources/tagesspiegel-dpa-noch-offline/index.html",
"hash": "e7b9e48f8d48",
"v": 2,
"first": "0.10.3",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-takvim-guncel-2026-10-22-php2shell-guvenlik-aci": {
"kind": "source",
"zone": "research",
"title": "Takvim: Siber alemde PHP2Shell alarmı! 5 soruda Avrupa'da siteleri karartan kriz: Türkiye'de durum ne?",
"path": "sources/takvim-guncel-2026-10-22-php2shell-guvenlik-aci/index.html",
"hash": "a1ed98cea2c5",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-tchina-kyodonews-articles-15266": {
"kind": "source",
"zone": "research",
"title": "共同網: 日本政府全力應對「PHP」漏洞 通過SNS廣泛提醒注意",
"path": "sources/tchina-kyodonews-articles-15266/index.html",
"hash": "ced5600b7a7e",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-tech-everyeye-notizie-vulnerabilita-php-70-siti-mondo": {
"kind": "source",
"zone": "research",
"title": "Everyeye Tech: Vulnerabilità PHP: il 70% dei siti al mondo è stato a rischio per più di 10 anni!",
"path": "sources/tech-everyeye-notizie-vulnerabilita-php-70-siti-mondo/index.html",
"hash": "521827b7dcf1",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-tech-noisy-2026-10-22-php2shell-php-rce-cve-2026-10": {
"kind": "source",
"zone": "research",
"title": "tech-noisy: PHP2Shell - PHP本体の脆弱性2件と修正版8.5.12・影響範囲",
"path": "sources/tech-noisy-2026-10-22-php2shell-php-rce-cve-2026-10/index.html",
"hash": "8f242c285c42",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-techaeris-2026-10-21-php2shell-the-emergency-php-p": {
"kind": "source",
"zone": "research",
"title": "Techaeris: PHP2Shell: The Emergency PHP Patch Is Out",
"path": "sources/techaeris-2026-10-21-php2shell-the-emergency-php-p/index.html",
"hash": "b98004d187e4",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-techgaming-internet-sotto-attacco-php2shell-vulnera": {
"kind": "source",
"zone": "research",
"title": "TechGaming.it: Internet sotto attacco: PHP2Shell mette a rischio milioni di siti",
"path": "sources/techgaming-internet-sotto-attacco-php2shell-vulnera/index.html",
"hash": "1096d48e5165",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-technotoday-php2shell-saldirilari-iki-kritik-php-aci": {
"kind": "source",
"zone": "research",
"title": "Technotoday: PHP2Shell Saldırıları: İki Kritik PHP Açığı Nasıl Çalışıyor? - Technotoday",
"path": "sources/technotoday-php2shell-saldirilari-iki-kritik-php-aci/index.html",
"hash": "41b507c98e8a",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-techtarget-cybersecurity-news-366652444-php2shell-2": {
"kind": "source",
"zone": "research",
"title": "TechTarget: PHP2Shell: 22M exposed servers at risk as emergency patches released | TechTarget",
"path": "sources/techtarget-cybersecurity-news-366652444-php2shell-2/index.html",
"hash": "a4b32fff8ddc",
"v": 1,
"first": "0.14.30",
"changed": "0.14.30",
"date": "2026-10-23T23:25Z"
},
"src-techtarget-disclosure-unravels": {
"kind": "source",
"zone": "research",
"title": "TechTarget: PHP2Shell disclosure unravels after leaks forced early patch drop | TechTarget",
"path": "sources/techtarget-disclosure-unravels/index.html",
"hash": "74113e5b5604",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-23T01:20Z"
},
"src-techtarget-itmedia-tt-article-2610-23-2000002526": {
"kind": "source",
"zone": "research",
"title": "TechTargetジャパン: PHP脆弱性「PHP2Shell」で2260万件に影響　情シスの緊急チェックリスト：OpenAIモデルが暴いた脆弱性 - TechTargetジャパン",
"path": "sources/techtarget-itmedia-tt-article-2610-23-2000002526/index.html",
"hash": "fb0159fe3a81",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-techzine-php-chainguard": {
"kind": "source",
"zone": "research",
"title": "Techzine Global: PHP accuses Chainguard in PHP2shell",
"path": "sources/techzine-php-chainguard/index.html",
"hash": "af8d3c7ceb36",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:21Z"
},
"src-tek-sapo-opiniao-artigos-exposicao-de-portugal-ao-php2shell": {
"kind": "source",
"zone": "research",
"title": "SAPO Tek: Exposição de Portugal ao PHP2SHELL: Em trinta segundos - Tek Notícias",
"path": "sources/tek-sapo-opiniao-artigos-exposicao-de-portugal-ao-php2shell/index.html",
"hash": "589e6d2e1487",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-tekno-kompas-read-2026-10-22-14200007-celah-keamanan": {
"kind": "source",
"zone": "research",
"title": "Kompas Tekno: Celah Keamanan \"PHP2Shell\" Berpotensi Ancam 70 Persen Website di Dunia",
"path": "sources/tekno-kompas-read-2026-10-22-14200007-celah-keamanan/index.html",
"hash": "7077cb38a110",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-teknoblog-php-icin-acil-guncelleme-iki-kritik-guve": {
"kind": "source",
"zone": "research",
"title": "Teknoblog: PHP için acil güncelleme: İki kritik güvenlik açığı kapatıldı",
"path": "sources/teknoblog-php-icin-acil-guncelleme-iki-kritik-guve/index.html",
"hash": "4f6ac32722df",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-teknofilo-php2shell-fallos-php-cierre-webs-actuali": {
"kind": "source",
"zone": "research",
"title": "Teknófilo: PHP2Shell: fallos críticos de PHP provocan cierres de webs",
"path": "sources/teknofilo-php2shell-fallos-php-cierre-webs-actuali/index.html",
"hash": "f37f54149fc4",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-23T16:04Z"
},
"src-teknologi-bisnis-read-20261023-84-2015221-pengamat-ingatk": {
"kind": "source",
"zone": "research",
"title": "Bisnis Tekno: Pengamat Ingatkan Komdigi, Mitigasi Kerentanan PHP Tak Boleh Sebatas Imbauan",
"path": "sources/teknologi-bisnis-read-20261023-84-2015221-pengamat-ingatk/index.html",
"hash": "bb80ca3a7e3f",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-24T08:37Z"
},
"src-teknotalk-php2shell-acigi-kron-teknoloji-guvenlik": {
"kind": "source",
"zone": "research",
"title": "TeknoTalk: PHP2Shell Açığı Nedir? Kron Teknoloji’den Kritik Güvenlik Uyarısı!",
"path": "sources/teknotalk-php2shell-acigi-kron-teknoloji-guvenlik/index.html",
"hash": "9d4d832e97ea",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-24T13:34Z"
},
"src-telesurenglish-php2shell-vulnerabilities": {
"kind": "source",
"zone": "research",
"title": "teleSUR English: PHP2Shell Crisis: 2 Critical Flaws Put 70% of Websites at Risk - teleSUR English",
"path": "sources/telesurenglish-php2shell-vulnerabilities/index.html",
"hash": "dd6a19fe3f1d",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-tenable-php2shell-faq": {
"kind": "source",
"zone": "research",
"title": "Tenable: php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable®",
"path": "sources/tenable-php2shell-faq/index.html",
"hash": "d2d332a5571f",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-the-next-web-php2shell-no-confirmed-breaches": {
"kind": "source",
"zone": "research",
"title": "The Next Web: Millions of PHP2Shell attempts so far, but officials see no break-in",
"path": "sources/the-next-web-php2shell-no-confirmed-breaches/index.html",
"hash": "5a8137ab3ffd",
"v": 2,
"first": "0.14.30",
"changed": "0.22.30",
"date": "2026-10-26"
},
"src-the-register-hackers-pile-on-php2shell": {
"kind": "source",
"zone": "research",
"title": "The Register: Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure",
"path": "sources/the-register-hackers-pile-on-php2shell/index.html",
"hash": "cb29ad56c65f",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-23T01:20Z"
},
"src-the-verge-php2shell-websites-down": {
"kind": "source",
"zone": "research",
"title": "The Verge: Everything we know so far about the PHP2Shell vulnerability | The Verge",
"path": "sources/the-verge-php2shell-websites-down/index.html",
"hash": "284bbd34139f",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-23T01:20Z"
},
"src-the420-php2shell-critical-vulnerabilities-cve-2": {
"kind": "source",
"zone": "research",
"title": "The420.in: PHP2Shell Alert: Two Critical 9.2-Rated Flaws Put PHP Servers on High Alert - The420.in",
"path": "sources/the420-php2shell-critical-vulnerabilities-cve-2/index.html",
"hash": "f1da431d6d00",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-thehackernews-php2shell-4days": {
"kind": "source",
"zone": "research",
"title": "The Hacker News (Ravie Lakshmanan): Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed",
"path": "sources/thehackernews-php2shell-4days/index.html",
"hash": "2b9a4180a0c0",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-thehackernews-php2shell-unpatched-alert": {
"kind": "source",
"zone": "research",
"title": "The Hacker News: PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert",
"path": "sources/thehackernews-php2shell-unpatched-alert/index.html",
"hash": "2de98ce0b83d",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-thehackernews-what-protects-you": {
"kind": "source",
"zone": "research",
"title": "The Hacker News: PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't",
"path": "sources/thehackernews-what-protects-you/index.html",
"hash": "1d29526e54b4",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-themandarin-322640-asd-rushes-out-critical-alert-on-unpatched-php-vulner": {
"kind": "source",
"zone": "research",
"title": "The Mandarin: ASD rushes out ‘critical’ alert on unpatched PHP vulnerability",
"path": "sources/themandarin-322640-asd-rushes-out-critical-alert-on-unpatched-php-vulner/index.html",
"hash": "ebf520766613",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T08:03Z"
},
"src-therecord-php-foundation-statement": {
"kind": "source",
"zone": "research",
"title": "The Record (Recorded Future News): PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024 | The Recor",
"path": "sources/therecord-php-foundation-statement/index.html",
"hash": "575d5e2a14a3",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-therecord-php-warnings": {
"kind": "source",
"zone": "research",
"title": "therecord.media: Hundreds of websites taken offline as concern grows over two PHP vulnerabilities | The Record from Recorded Future News",
"path": "sources/therecord-php-warnings/index.html",
"hash": "6f859cce2400",
"v": 2,
"first": "0.10.3",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-theregister-php-blames-chainguard": {
"kind": "source",
"zone": "research",
"title": "The Register: PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk",
"path": "sources/theregister-php-blames-chainguard/index.html",
"hash": "9d5c4c1f729f",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-thestar-aseanplus-aseanplus-news-2026-10-22-seri": {
"kind": "source",
"zone": "research",
"title": "The Star: Serious language programme PHP's security flaw leaves internet websites at major risk, reports dpa | The Star",
"path": "sources/thestar-aseanplus-aseanplus-news-2026-10-22-seri/index.html",
"hash": "7c06ec824951",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-tpo-nl-digid-offline": {
"kind": "source",
"zone": "research",
"title": "TPO.nl: PHP-lek legt DigiD, MijnOverheid en Tweede Kamer plat | TPO.NL",
"path": "sources/tpo-nl-digid-offline/index.html",
"hash": "e17c744611f1",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:32Z"
},
"src-tpo-tpo-nl-digid-offline": {
"kind": "source",
"zone": "research",
"title": "TPO: PHP-lek legt DigiD, MijnOverheid en Tweede Kamer plat | TPO.NL",
"path": "sources/tpo-tpo-nl-digid-offline/index.html",
"hash": "436ab4619235",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T17:15Z"
},
"src-trak-stories-70-websites-at-security-risk-due": {
"kind": "source",
"zone": "research",
"title": "Trak.in: 70% Websites At Security Risk Due To Critical PhP Vulnerability: PHP2Shell - Trak.in - Indian Business of Tech, Mobile & Startups",
"path": "sources/trak-stories-70-websites-at-security-risk-due/index.html",
"hash": "481b1144a508",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"src-tugatech-t93092-milhoes-de-servidores-php-expostos-ao-risco": {
"kind": "source",
"zone": "research",
"title": "TugaTech: Milhões de servidores PHP expostos ao risco da falha PHP2Shell | TugaTech",
"path": "sources/tugatech-t93092-milhoes-de-servidores-php-expostos-ao-risco/index.html",
"hash": "9e60b6c0251d",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-tuttotech-news-2026-10-22-vulnerabilita-php-html": {
"kind": "source",
"zone": "research",
"title": "TuttoTech.net: Due gravi falle in PHP mandano offline i siti web governativi",
"path": "sources/tuttotech-news-2026-10-22-vulnerabilita-php-html/index.html",
"hash": "9dbe87d7429c",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-uk-edinburgh-council": {
"kind": "source",
"zone": "research",
"title": "edinburgh.gov.uk: Home – The City of Edinburgh Council",
"path": "sources/uk-edinburgh-council/index.html",
"hash": "5a509bd3fcbc",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-unige-site": {
"kind": "source",
"zone": "research",
"title": "unige.ch: Error 503",
"path": "sources/unige-site/index.html",
"hash": "223a6a6fd61f",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:19Z"
},
"src-usa-today-php2shell-live": {
"kind": "source",
"zone": "research",
"title": "USA Today: Latest on PHP vulnerability as patch gets released, NSA issues warning",
"path": "sources/usa-today-php2shell-live/index.html",
"hash": "d6ab4a1c5c28",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-23T01:20Z"
},
"src-voix-business-cards-rainforest-ip-activity-an": {
"kind": "source",
"zone": "research",
"title": "voix: RainForestが明らかにしたPHP2Shell脆弱性に関連する3つのIPアドレスの活動履歴 - VOIX",
"path": "sources/voix-business-cards-rainforest-ip-activity-an/index.html",
"hash": "594b40c2a3d5",
"v": 1,
"first": "0.15.19",
"changed": "0.15.19",
"date": "2026-10-24T16:05Z"
},
"src-wall-street-articol-it-and-c-important-vulnerabilita": {
"kind": "source",
"zone": "research",
"title": "Wall-Street.ro: IMPORTANT Vulnerabilitatea PHP2Shell: ce recomandă experții în tehnologie și unde e expunerea cea mai mare",
"path": "sources/wall-street-articol-it-and-c-important-vulnerabilita/index.html",
"hash": "09ad2c21bd63",
"v": 1,
"first": "0.19.2",
"changed": "0.19.2",
"date": "2026-10-25T09:35Z"
},
"src-watchtowr-php2shell": {
"kind": "source",
"zone": "research",
"title": "watchTowr: watchtowr.com",
"path": "sources/watchtowr-php2shell/index.html",
"hash": "e98adde7e066",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-watchtowr-php2shell-faq": {
"kind": "source",
"zone": "research",
"title": "watchTowr: watchtowr.com",
"path": "sources/watchtowr-php2shell-faq/index.html",
"hash": "b604a04608c9",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-watson-wirtschaft-schweiz-322033892-php2shell-laut-bund-kein": {
"kind": "source",
"zone": "research",
"title": "Watson: PHP2Shell: Laut Bund keine Hackerangriffe in der Schweiz bekannt",
"path": "sources/watson-wirtschaft-schweiz-322033892-php2shell-laut-bund-kein/index.html",
"hash": "3bcdb2164b11",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T18:16Z"
},
"src-weirdgloop-blog-php2shell": {
"kind": "source",
"zone": "research",
"title": "Weird Gloop (cookmeplox): Recent wiki downtime (PHP2Shell mitigation) | Weird Gloop",
"path": "sources/weirdgloop-blog-php2shell/index.html",
"hash": "0504d3f2d15b",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-wersm-php2shell-legacy-infrastructure-web-risk": {
"kind": "source",
"zone": "research",
"title": "wersm: PHP2Shell Shows the Risk of Legacy Web Infrastructure",
"path": "sources/wersm-php2shell-legacy-infrastructure-web-risk/index.html",
"hash": "4e8914024e7f",
"v": 1,
"first": "0.22.28",
"changed": "0.22.28",
"date": "2026-10-26T01:31Z"
},
"src-wikimediastatus-page": {
"kind": "source",
"zone": "research",
"title": "wikimediastatus.net: Wikimedia Status",
"path": "sources/wikimediastatus-page/index.html",
"hash": "3ee340988f44",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:18Z"
},
"src-wikipedia-dan-kaminsky": {
"kind": "source",
"zone": "research",
"title": "Wikipedia (English): Dan Kaminsky - Wikipedia",
"path": "sources/wikipedia-dan-kaminsky/index.html",
"hash": "93e08f88a66c",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:33Z"
},
"src-wikipedia-en-mainpage": {
"kind": "source",
"zone": "research",
"title": "en.wikipedia.org: Wikipedia, the free encyclopedia",
"path": "sources/wikipedia-en-mainpage/index.html",
"hash": "cfff60a52f53",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:18Z"
},
"src-wikipedia-equifax-breach": {
"kind": "source",
"zone": "research",
"title": "Wikipedia (English): 2017 Equifax data breach - Wikipedia",
"path": "sources/wikipedia-equifax-breach/index.html",
"hash": "1e8ea436a45a",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:33Z"
},
"src-wikipedia-heartbleed": {
"kind": "source",
"zone": "research",
"title": "Wikipedia (English): Heartbleed - Wikipedia",
"path": "sources/wikipedia-heartbleed/index.html",
"hash": "6bec6f77eb5a",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:32Z"
},
"src-wikipedia-log4shell": {
"kind": "source",
"zone": "research",
"title": "Wikipedia (English): Log4Shell - Wikipedia",
"path": "sources/wikipedia-log4shell/index.html",
"hash": "031ca89c6b4d",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-wikipedia-moveit-breach": {
"kind": "source",
"zone": "research",
"title": "Wikipedia (English): 2023 MOVEit data breach - Wikipedia",
"path": "sources/wikipedia-moveit-breach/index.html",
"hash": "905968f4b2a6",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-wikipedia-php2shell": {
"kind": "source",
"zone": "research",
"title": "Wikipedia (English): PHP2Shell - Wikipedia",
"path": "sources/wikipedia-php2shell/index.html",
"hash": "dae75b61f104",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-wikipedia-shellshock": {
"kind": "source",
"zone": "research",
"title": "Wikipedia (English): Shellshock (software bug) - Wikipedia",
"path": "sources/wikipedia-shellshock/index.html",
"hash": "d1e882805e9b",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:33Z"
},
"src-wikipedia-spring-framework": {
"kind": "source",
"zone": "research",
"title": "Wikipedia (English): Spring Framework - Wikipedia",
"path": "sources/wikipedia-spring-framework/index.html",
"hash": "6421ef8b1a5b",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:33Z"
},
"src-wired-exploited-days-before-patched": {
"kind": "source",
"zone": "research",
"title": "WIRED: Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched | WIRED",
"path": "sources/wired-exploited-days-before-patched/index.html",
"hash": "aa0d05736261",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-23T01:20Z"
},
"src-wiz-blog-php2shell": {
"kind": "source",
"zone": "research",
"title": "Wiz (Wiz Research): PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet",
"path": "sources/wiz-blog-php2shell/index.html",
"hash": "58c88eae6645",
"v": 2,
"first": "0.4.1",
"changed": "0.15.19",
"date": "2026-10-24"
},
"src-x-eastdakota-php2shell-stats": {
"kind": "source",
"zone": "research",
"title": "Matthew Prince (@eastdakota), Cloudflare CEO: Matthew Prince 🌥 on X: \"Some stats on #php2shell. In the 10 hours before it was publicly annou",
"path": "sources/x-eastdakota-php2shell-stats/index.html",
"hash": "550856e3af31",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:18Z"
},
"src-x-feross-chainguard": {
"kind": "source",
"zone": "research",
"title": "Feross Aboukhadijeh (@feross) on X: Feross on X: \"Chainguard received PHP’s fix for two critical RCEs under embargo, like every other distri",
"path": "sources/x-feross-chainguard/index.html",
"hash": "c71dc1a3824a",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:21Z"
},
"src-x-lcfr-hax-hash-tweet": {
"kind": "source",
"zone": "research",
"title": "Ryan Austin (@lcfr_hax), Calif: LCFR on X: hash commitment d935be02…",
"path": "sources/x-lcfr-hax-hash-tweet/index.html",
"hash": "94fc7228262c",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-x-openai-php2shell": {
"kind": "source",
"zone": "research",
"title": "OpenAI (@OpenAI): OpenAI on X: OpenAI models helped researchers ... discover critical security flaws in PHP",
"path": "sources/x-openai-php2shell/index.html",
"hash": "c1bc81e034b7",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-x-wiz-io-php2shell": {
"kind": "source",
"zone": "research",
"title": "Wiz (@wiz_io): Wiz on X: BREAKING ... #PHP2SHELL ... impacting 70% of the Internet",
"path": "sources/x-wiz-io-php2shell/index.html",
"hash": "b36b69734faf",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T08:16Z"
},
"src-yahoo-jp-gmo-fx-login-leak": {
"kind": "source",
"zone": "research",
"title": "Yahoo! News Japan (J-CAST): GMO「悪用確認されず」から一転　FX口座ログイン情報、流出の可能性　不正操作報告も（J-CASTニュース） - Yahoo!ニュース",
"path": "sources/yahoo-jp-gmo-fx-login-leak/index.html",
"hash": "598716e1c21b",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T19:15Z"
},
"src-yahoo-mashable-affected-list": {
"kind": "source",
"zone": "research",
"title": "tech.yahoo.com: PHP vulnerability: Which websites and services are affected?",
"path": "sources/yahoo-mashable-affected-list/index.html",
"hash": "6b3a2e503930",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-22T08:13Z"
},
"src-yle-finland-government-sites-shut": {
"kind": "source",
"zone": "research",
"title": "Yle (Finnish public broadcaster): Finland temporarily shuts down government websites as a precaution for critical vulnerabilities | Yle News",
"path": "sources/yle-finland-government-sites-shut/index.html",
"hash": "d91f6ab2043e",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22T11:32Z"
},
"src-yugatech-news-ai-helps-uncover-php2shell-flaws-th": {
"kind": "source",
"zone": "research",
"title": "YugaTech: AI Helps Uncover PHP2Shell Flaws That Put Websites Worldwide at Risk » YugaTech | Philippines Tech News & Reviews",
"path": "sources/yugatech-news-ai-helps-uncover-php2shell-flaws-th/index.html",
"hash": "688b9b8d5e6f",
"v": 1,
"first": "0.22.29",
"changed": "0.22.29",
"date": "2026-10-26T12:14Z"
},
"src-zataz-php2shell-deux-failles-critiques-menacen": {
"kind": "source",
"zone": "research",
"title": "ZATAZ: PHP2Shell : deux failles critiques menacent les serveurs web – ZATAZ.COM",
"path": "sources/zataz-php2shell-deux-failles-critiques-menacen/index.html",
"hash": "eb918a1ff27a",
"v": 1,
"first": "0.10.19",
"changed": "0.10.19",
"date": "2026-10-23T16:04Z"
},
"home-moments": {
"kind": "front",
"zone": "research",
"title": "How it unfolded: five moments",
"path": "index.html#moments",
"hash": "2c14c2cc2779",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"home-who": {
"kind": "front",
"zone": "for-you",
"title": "The briefing for you: fifteen readers",
"path": "index.html#who",
"hash": "eb43d07f0f0c",
"v": 2,
"first": "0.4.1",
"changed": "0.5.9",
"date": "2026-10-22"
},
"home-stories": {
"kind": "front",
"zone": "stories",
"title": "Stories: written here",
"path": "index.html#stories",
"hash": "e8fc6f9e9e1d",
"v": 8,
"first": "0.4.1",
"changed": "0.22.31",
"date": "2026-10-26"
},
"home-how": {
"kind": "front",
"zone": "site",
"title": "How this site knows",
"path": "index.html#evidence",
"hash": "cd53d1fb9263",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"q-fix-or-wait": {
"kind": "question",
"zone": "for-you",
"title": "Can anything be done to fix it, or do we just have to wait for updates?",
"path": "questions/fix-or-wait/index.html",
"hash": "4614fc324dd0",
"v": 2,
"first": "0.4.1",
"changed": "0.12.0",
"date": ""
},
"q-most-websites": {
"kind": "question",
"zone": "for-you",
"title": "Is PHP really the software behind most websites?",
"path": "questions/most-websites/index.html",
"hash": "072e86945b47",
"v": 3,
"first": "0.4.1",
"changed": "0.14.8",
"date": "2026-10-24"
},
"q-been-hacked": {
"kind": "question",
"zone": "for-you",
"title": "Has anyone actually been hacked?",
"path": "questions/been-hacked/index.html",
"hash": "5c54fc641a8a",
"v": 7,
"first": "0.4.1",
"changed": "0.19.2",
"date": "2026-10-25"
},
"q-passwords": {
"kind": "question",
"zone": "for-you",
"title": "Do I need to change my passwords?",
"path": "questions/passwords/index.html",
"hash": "baed68722ec2",
"v": 2,
"first": "0.4.1",
"changed": "0.12.0",
"date": ""
},
"q-am-i-affected": {
"kind": "question",
"zone": "for-you",
"title": "How do I know whether my site is affected?",
"path": "questions/am-i-affected/index.html",
"hash": "9bf1e841c11d",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"q-take-offline": {
"kind": "question",
"zone": "for-you",
"title": "Should we take our site offline?",
"path": "questions/take-offline/index.html",
"hash": "0b097557bf20",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"q-why-big-news": {
"kind": "question",
"zone": "for-you",
"title": "Why is this such big news?",
"path": "questions/why-big-news/index.html",
"hash": "60af69943e80",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"q-old-php": {
"kind": "question",
"zone": "for-you",
"title": "We are on PHP 7.4, 8.0 or 8.1. Is there a patch?",
"path": "questions/old-php/index.html",
"hash": "70deb67b4020",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"q-waf-enough": {
"kind": "question",
"zone": "for-you",
"title": "We are behind Cloudflare (or another firewall). Are we safe?",
"path": "questions/waf-enough/index.html",
"hash": "8a7dd00280c9",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"q-change-code": {
"kind": "question",
"zone": "for-you",
"title": "Do our developers need to change our code?",
"path": "questions/change-code/index.html",
"hash": "13ce4520c4db",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"story-steal-my-bitcoin": {
"kind": "story",
"zone": "stories",
"title": "Someone stole the bitcoin. What that does, and does not, tell us about php2shell",
"path": "articles/steal-my-bitcoin/index.html",
"hash": "22f668715ea1",
"v": 1,
"first": "0.22.31",
"changed": "0.22.31",
"date": "2026-10-26"
},
"story-has-anyone-been-hacked": {
"kind": "story",
"zone": "stories",
"title": "Has anyone actually been hacked through php2shell? What 525 sources say, five days on",
"path": "articles/has-anyone-been-hacked/index.html",
"hash": "8e59aa62e42b",
"v": 1,
"first": "0.22.30",
"changed": "0.22.30",
"date": "2026-10-26"
},
"story-what-wikipedia-knows-about-being-right": {
"kind": "story",
"zone": "stories",
"title": "What Wikipedia knows about being right: the principles, workflows and review habits this newsroom's agents should adopt",
"path": "articles/what-wikipedia-knows-about-being-right/index.html",
"hash": "3deb6198a3cf",
"v": 1,
"first": "0.21.0",
"changed": "0.21.0",
"date": "2026-10-25"
},
"story-what-changed-in-a-day": {
"kind": "story",
"zone": "stories",
"title": "What changed in a day: no victim yet, four named cases tested, a patch moving through the supply chain, and firewalls on the list",
"path": "articles/what-changed-in-a-day/index.html",
"hash": "d575ea9626e1",
"v": 1,
"first": "0.10.3",
"changed": "0.10.3",
"date": "2026-10-23"
},
"story-the-telemetry-tools": {
"kind": "story",
"zone": "stories",
"title": "Who reads this site, and what works on it: the tools we built to find out, and what they say on day two",
"path": "articles/the-telemetry-tools/index.html",
"hash": "df43f14a86e4",
"v": 1,
"first": "0.10.11",
"changed": "0.10.11",
"date": "2026-10-23"
},
"story-the-risk-graph-before-and-after": {
"kind": "story",
"zone": "stories",
"title": "The risk graph, before and after: what changed from one reader's five ideas",
"path": "articles/the-risk-graph-before-and-after/index.html",
"hash": "751bfba5f612",
"v": 3,
"first": "0.10.13",
"changed": "0.14.24",
"date": "2026-10-24"
},
"story-why-not-patch-every-version": {
"kind": "story",
"zone": "stories",
"title": "Why can't every version of PHP just be patched?",
"path": "articles/why-not-patch-every-version/index.html",
"hash": "9bcca63c02bf",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"story-where-php2shell-stands": {
"kind": "story",
"zone": "stories",
"title": "Where php2shell stands: many sites dark, millions of attempts, no confirmed breach",
"path": "articles/where-php2shell-stands/index.html",
"hash": "92ba3318e8bf",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"story-exposed-is-not-exploited": {
"kind": "story",
"zone": "stories",
"title": "Exposed is not exploited: the sites php2shell did not hit, and what a hit will admit",
"path": "articles/exposed-is-not-exploited/index.html",
"hash": "6ad05059ec37",
"v": 1,
"first": "0.4.3",
"changed": "0.4.3",
"date": "2026-10-22"
},
"story-php2shell-in-perspective": {
"kind": "story",
"zone": "stories",
"title": "php2shell in perspective: an old embargo model, a Log4Shell shape, and the shrinking gap between theory and proof",
"path": "articles/php2shell-in-perspective/index.html",
"hash": "c594d75cabc2",
"v": 1,
"first": "0.4.1",
"changed": "0.4.1",
"date": "2026-10-22"
},
"story-patch-at-the-speed-of-metasploit": {
"kind": "story",
"zone": "stories",
"title": "Patch at the speed of Metasploit: where php2shell sits on the weaponisation ladder, and the attacks that come second and third",
"path": "articles/patch-at-the-speed-of-metasploit/index.html",
"hash": "f47cf1784e47",
"v": 1,
"first": "0.4.2",
"changed": "0.4.2",
"date": "2026-10-22"
}
}
}