Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

The story as a graph / Parties

Every party, whatever a page calls it

243 parties: the people, organisations, agencies, outlets and platforms that published a source or are named as saying something. The sources spell them 249 ways; each spelling resolves to one node here, so CISA is one party however many pages name it. States counts the claims, numbers and signals a party originates; relays counts those it passed on from someone else.

The graph of each party needs JavaScript; the tables below carry the same counts.

Organisation (52)

Party	States	Sources published	Claims it states
The PHP Foundation	13	2	rce-fpm who-first openai-same-day wiz-independent quarkslab-2024 leak-cve-ids leak-video leak-mitigations chainguard release-moved preannounce-time
Wiz Research	9	2	versions-old wordpress-drupal scale-70pc-internet scale-70pc-websites ai-found wiz-independent most-severe release-moved
Cloudflare	7	1	scale-70pc-websites cloudflare-traffic probing waf-nine-hours
Amazon (CJ Moses)	6	1	amazon-honeypot probing
The PHP Group / php.net	6	2	two-cves-9.2 rce-modphp only-update release-moved release-time
Calif	4	1	wordpress-drupal ai-found who-first quarkslab-2024
Imperva Threat Research	4	1	imperva-none ac-high waf-nine-hours
OpenAI	4	4	scale-70pc-websites ai-found ahead-of-attackers
Fastly	3	1	ac-high more-paths waf-nine-hours
Huntress	3	1	huntress-none pocs-wrong
VulnCheck	3	0	scale-2.6m-hosts pocs-wrong
Akamai	2	2	waf-nine-hours kev-precedent
Censys	2	0	scale-2.6m-hosts
Weird Gloop (cookmeplox)	2	1	weirdgloop-13h
watchTowr	2	2	watchtowr-itw
ELLIO	1	0
Fortinet	1	2	waf-nine-hours
Oxford City Council	1	0	oxford
Palo Alto Networks Unit 42 part of Palo Alto Networks	1	0
Quarkslab, OSTIF	1	1	quarkslab-redacted
The City of Edinburgh Council	1	2	edinburgh
The Dutch government	1	2	nl-offline
The Wikimedia Foundation	1	1	wikimedia-precaution
Valtori and NCSC-FI	1	1	fi-offline
ANTS (France Titres) part of French Ministry of the Interior	0	1
Arctic Wolf Labs	0	1
Armis	0	1
Broadcom (Symantec)	0	1
Chainguard	0	0
Cisco	0	1
CybelAngel	0	1
EPFL	0	1
Equixly	0	1
French Ministry of the Interior	0	1
Lorikeet Security	0	1
Palo Alto Networks	0	1
Prophet Security	0	1
Préfecture de police (Paris) part of French Ministry of the Interior	0	2
Préfecture du Nord part of French Ministry of the Interior	0	1
Préfecture du Rhône part of French Ministry of the Interior	0	1
QNAP	0	2
Qualys	0	1
Recorded Future	0	1
Rocket Boys LLC (合同会社ロケットボーイズ)	0	1
SOCRadar	0	1
Safeguard	0	2
Sansec	0	1
SentinelOne	0	1
Socket	0	1
Tenable	0	1
Université de Genève	0	2
latvija.gov.lv, the Latvian state portal	0	1

Agency (17)

Party	States	Sources published	Claims it states
CISA member of National agencies	7	6	waf cisa-none offline-cisa kev-precedent
CERT.LV member of National agencies	5	1	scale-latvia latvia-attempts latvia-offline
NCSC-NL part of The Dutch government; member of National agencies	3	5	versions-old scale-ncsc-nl
CERT-EU member of National agencies	2	1	leak-watchtowr
CERT-FR (ANSSI) member of National agencies	2	1	versions-old release-time
NCSC New Zealand member of National agencies	2	2	nz-active
NSA Cybersecurity member of National agencies	2	4	offline-nsa gov-patch-required
ACN / CSIRT Italia member of National agencies	1	1
ASD's ACSC member of National agencies	1	3
Canadian Centre for Cyber Security (CCCS) member of National agencies	1	2
UK NCSC member of National agencies	1	1	offline-ncsc
CCN-CERT member of National agencies	0	1
CNCS member of National agencies	0	1
ENISA CSIRTs Network member of National agencies	0	1
JPCERT/CC member of National agencies	0	2
NÚKIB member of National agencies	0	1
Swiss BACS (NCSC) member of National agencies	0	2

Person (20)

Party	States	Sources published	Claims it states
Jakub Zelenka (bukka), PHP security team member of The PHP security team	5	4	two-cves-9.2 rce-fpm four-reporters fix-engine
Alan Woodward, Surrey Centre for Cyber Security	4	0	scale-30m probing
Alexandre Daubois, PHP security team member of The PHP security team	3	1	leak-hn leak-watchtowr release-time
Dan Lorenc, Chainguard works for Chainguard	3	0	chainguard lorenc-ai-found
Matthew Prince, Cloudflare CEO works for Cloudflare	3	1	cf-millions
Ryan Austin, Calif works for Calif	2	1	no-exploitation
David Lopez-Kurtz	1	1	quarkslab-redacted
rjmendez member of Community detection authors	1	1	pocs-wrong
'sps', OpenAI Developer Community	0	1
Aaron Rainbolt	0	0
Alan Coopersmith, Oracle	0	1
Blevene member of Community detection authors	0	1
Christian Fischer, Greenbone	0	0
Feross Aboukhadijeh	0	1
Lexsah member of Community detection authors	0	1
Silas Cutler	0	1
Yves-Alexis Perez, Debian	0	0
adoy, PHP release manager member of The PHP Group / php.net	0	1
allixsenos	0	0
darkfibr (Mike Haddock) member of Community detection authors	0	1

Group (5)

Party	States	Relays	Sources published	Claims it states
The PHP security team part of The PHP Group / php.net	3	0	0	rce-modphp fix-bailout only-update
Arnaud Le Blanc and the PHP fix authors member of The PHP security team	2	0	0	fix-authored fix-engine
Replies on oss-security: Aaron Rainbolt, Yves-Alexis Perez, Christian Fischer	0	1	1
Community detection authors	0	0	0
National agencies	0	0	0

Outlet (140)

Party	States	Relays	Sources published	Claims it states
BBC News	3	11	1	disclosure-22oct offline-allies affected-sites
The Hacker News	0	8	3
Insurance Business	1	2	3	uk-list
SecurityWeek	0	3	3
East Anglian Daily Times (PA)	0	2	1
Global Banking and Finance Review	0	2	2
LBC	1	1	1	uk-list
The Cyber Express	0	2	1
The Register	0	2	2
Actu17	0	1	1
CNN	0	1	2
Dark Reading	0	1	1
Edinburgh Evening News	0	1	1
Helsinki Times	0	1	1
Newsweek	0	1	2
Oxford Chronicle	0	1	1
RTÉ	0	1	1
TPO.nl	0	1	2
The Record part of Recorded Future	0	1	2
The Scotsman	0	1	2
Yle	0	1	1
01net	0	0	1
20 Minuten	0	0	2
20minutos	0	0	1
ABC News (Australia)	0	0	2
AG Connect	0	0	1
AI4Business	0	0	1
ActuIA	0	0	1
Agencia Andina	0	0	1
Analytics Insight	0	0	1
Ars Technica	0	0	1
AsiaOne	0	0	1
BankInfoSecurity	0	0	1
Bitpage.de	0	0	1
BleepingComputer	0	0	2
Blog du Modérateur (BDM)	0	0	1
Bloomberg	0	0	1
BornCity	0	0	1
Boursorama	0	0	1
Bursa Hakimiyet	0	0	1
CNA (Channel NewsAsia)	0	0	1
CNN Portugal	0	0	1
CRN	0	0	1
Canaltech	0	0	1
Clarín (English edition)	0	0	1
Clickx	0	0	1
Coingape	0	0	1
Cointelegraph Brasil	0	0	1
Computable.nl	0	0	1
Computer Weekly	0	0	1
Computerworld España	0	0	1
Critic Arad	0	0	1
Cyber Kendra	0	0	1
Cyber Press	0	0	1
CyberScoop	0	0	1
Cybernews	0	0	1
DELFI	0	0	1
Der Tagesspiegel	0	0	1
DiarioBitcoin	0	0	1
Dutch IT Leaders	0	0	1
Everyeye Tech	0	0	1
Fortune	0	0	1
GinjFo	0	0	1
Global News	0	0	1
HardwareCooking	0	0	1
Help Net Security	0	0	1
How-To Geek	0	0	1
ICTjournal	0	0	1
IDX Channel	0	0	1
INTERNET Watch (Impress)	0	0	1
IT Social	0	0	1
ITdaily	0	0	1
India TV News	0	0	1
Infopoint Security	0	0	1
Information Age (ACS)	0	0	1
Infosecurity Magazine	0	0	1
Insider Paper	0	0	1
J-CAST News	0	0	0
Jornal de Notícias	0	0	1
Journal du Canada	0	0	1
Journal du Coin	0	0	1
Koran Jakarta	0	0	1
Kyodo News	0	0	1
L'essentiel	0	0	1
La Libre Belgique	0	0	1
Le Monde Informatique	0	0	1
Le Temps	0	0	1
LeBigData.fr	0	0	1
Les Affaires	0	0	1
Linternaute	0	0	1
Lupa.cz	0	0	1
Mado no Mori (窓の杜)	0	0	1
Marketing4eCommerce	0	0	1
Mashable	0	0	0
Mashable India	0	0	1
MediaNama	0	0	1
Morocco World News	0	0	1
News9Live	0	0	1
Người Quan Sát	0	0	1
Notebookcheck.it	0	0	1
ORF	0	0	1
PA Media (the Press Association)	0	0	0
PCMag	0	0	1
Paperjam	0	0	1
Polinews	0	0	1
QA Financial	0	0	1
RTL.de	0	0	1
RTVE	0	0	1
Reuters	0	0	0
SAPO Tek	0	0	1
Salzburg24	0	0	1
Sankei Shimbun	0	0	1
Search Engine Roundtable	0	0	1
Security.NL	0	0	2
Shinailbo (신아일보)	0	0	1
SiliconANGLE	0	0	1
TechTarget	0	0	1
TechTarget Japan	0	0	1
Techaeris	0	0	1
Techzine Global	0	0	1
The Economic Times	0	0	1
The Indian Express	0	0	1
The Mandarin	0	0	1
The Star	0	0	1
The Verge	0	0	1
The420.in	0	0	1
Trak.in	0	0	1
TugaTech	0	0	1
TuttoTech	0	0	1
USA Today	0	0	1
WIRED	0	0	1
Wikipedia (English) part of The Wikimedia Foundation	0	0	9
Yahoo	0	0	1
Yahoo! News Japan	0	0	2
ZATAZ	0	0	1
dpa (Deutsche Presse-Agentur)	0	0	0
la Repubblica	0	0	1
php[architect]	0	0	1
shattered.io	0	0	1
watson	0	0	1

Registry (2)

Party	States	Relays	Sources published	Claims it states
The CVE Program	1	0	12	ac-high
NIST National Vulnerability Database	0	0	2

Project (3)

Party	States	Sources published
php/php-src part of The PHP Group / php.net	1	3
PHPocalypse Tracker	0	1
php2shell.com, the joint microsite of OpenAI, Wiz and Calif	0	1

Platform (2)

Party	States	Relays	Sources published	Claims it states
X (Twitter)	1	0	0
nitter.net, an X mirror	0	0	1

Unnamed (1)

Party	States	Relays	Sources published	Claims it states
Unnamed sources	4	0	0	cvss-10 fix-incomplete vibe-code

This-site (1)

Party	States	Relays	Sources published	Claims it states
This site (php.oct.2026.newsroom.sgit.ai)	1	0	0	no-confirmed-compromise

The file is data/entities.json, with who states each row in data/attribution.json. A party with a page of its own links to it.