# Fact: Automated exploitation attempts were seen in Latvia; none succeeded

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Automated exploitation attempts were seen in Latvia; none succeeded Who says it, its status (reported), its sources, and its timeline from publication to this site.

Fact · exploitation · reported

# Automated exploitation attempts were seen in Latvia; none succeeded

**Who says it:** CERT.LV · **Sources:** [CERT.LV](../../sources/certlv-php-preventive/index.html)

Primary source.

## Fact-check

**A2** Reported●●○○○○ · Event · verdict: **holds in part**

CERT.LV's own page carries the automated attempts; it says there are 'no reports of successful attacks so far' (as of 21 Oct 23:00 local, 20:00Z), which is a dated absence of reports, not 'none succeeded'.

| Capture checked | Result | What it says | sha256 of the text read |
|---|---|---|---|
| [certlv-php-preventive](../../sources/certlv-php-preventive/index.html) | partial | *Latvijā jau ir konstatēti automatizēti mēģinājumi izmantot PHP ievainojamības, taču līdz šim nav ziņu par sekmīgiem uzbrukumiem.* | e37a6582c4e6c685 |

Open tickets: [Finding-16](../../factcheck/index.html#Finding-16).

Graded in Run-1, resting on captures up to 2026-10-22 08:13 UTC. The scale is on [the fact-check page](../../factcheck/index.html#ladder).

## This fact over time
- 2026-10-21 18:25 UTCCERT.LV publishes [Saistībā ar globāli atklātām PHP ievainojamībām Latvijā ievieš preventīvus pasākumus](../../sources/certlv-php-preventive/index.html)
- 2026-10-22 08:13 UTCSaved into the evidence vault: CERT.LV
- 2026-10-22Enters this site as reported in v0.1.0 (reconstructed from git)

Published: when the source says it was published. Saved: the first capture into the evidence vault. The rest are this site: the release in which the fact first appeared and every release that changed its wording, sources or status.

## What it rests on

## Where this fact appears

In the briefings for:
AAlexCurious readerCCaseyWebsite ownerJJordanBoard member or executiveSSamSecurity leadBBlakeAnalyst or policy advisorRRobinCISOQQuinnCFOMMorganData protection officerJJamieHead of AppSec
And on [every claim](../../claims/index.html#latvia-attempts).

## Every version of this fact
v1 · site v0.1.0 · 22 October 2026 · reported
```
Automated exploitation attempts were seen in Latvia; none succeeded
Who says it: CERT.LV
Status: reported
Topic: exploitation
Sources: certlv-php-preventive
```


---
site v0.8.0 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/facts/latvia-attempts/index.html