# Every party on the story: who states, who relays, who publishes

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

243 parties resolved from 249 spellings, with the claims each one states and passes on.

[The story as a graph](../index.html) / Parties

# Every party, whatever a page calls it

243 parties: the people, organisations, agencies, outlets and platforms that published a source or are named as saying something. The sources spell them 249 ways; each spelling resolves to one node here, so CISA is one party however many pages name it. *States* counts the claims, numbers and signals a party originates; *relays* counts those it passed on from someone else.

The graph of each party needs JavaScript; the tables below carry the same counts.

## Organisation (52)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| [The PHP Foundation](../../actors/php-foundation/index.html) | 13 | 0 | 2 | [rce-fpm](../../facts/rce-fpm/index.html) [who-first](../../facts/who-first/index.html) [openai-same-day](../../facts/openai-same-day/index.html) [wiz-independent](../../facts/wiz-independent/index.html) [quarkslab-2024](../../facts/quarkslab-2024/index.html) [leak-cve-ids](../../facts/leak-cve-ids/index.html) [leak-video](../../facts/leak-video/index.html) [leak-mitigations](../../facts/leak-mitigations/index.html) [chainguard](../../facts/chainguard/index.html) [release-moved](../../facts/release-moved/index.html) [preannounce-time](../../facts/preannounce-time/index.html) |
| [Wiz Research](../../actors/wiz/index.html) | 9 | 0 | 2 | [versions-old](../../facts/versions-old/index.html) [wordpress-drupal](../../facts/wordpress-drupal/index.html) [scale-70pc-internet](../../facts/scale-70pc-internet/index.html) [scale-70pc-websites](../../facts/scale-70pc-websites/index.html) [ai-found](../../facts/ai-found/index.html) [wiz-independent](../../facts/wiz-independent/index.html) [most-severe](../../facts/most-severe/index.html) [release-moved](../../facts/release-moved/index.html) |
| [Cloudflare](../../actors/cloudflare/index.html) | 7 | 0 | 1 | [scale-70pc-websites](../../facts/scale-70pc-websites/index.html) [cloudflare-traffic](../../facts/cloudflare-traffic/index.html) [probing](../../facts/probing/index.html) [waf-nine-hours](../../facts/waf-nine-hours/index.html) |
| [Amazon (CJ Moses)](../../actors/amazon/index.html) | 6 | 0 | 1 | [amazon-honeypot](../../facts/amazon-honeypot/index.html) [probing](../../facts/probing/index.html) |
| [The PHP Group / php.net](../../actors/php-group/index.html) | 6 | 0 | 2 | [two-cves-9.2](../../facts/two-cves-9.2/index.html) [rce-modphp](../../facts/rce-modphp/index.html) [only-update](../../facts/only-update/index.html) [release-moved](../../facts/release-moved/index.html) [release-time](../../facts/release-time/index.html) |
| [Calif](../../actors/calif/index.html) | 4 | 0 | 1 | [wordpress-drupal](../../facts/wordpress-drupal/index.html) [ai-found](../../facts/ai-found/index.html) [who-first](../../facts/who-first/index.html) [quarkslab-2024](../../facts/quarkslab-2024/index.html) |
| [Imperva Threat Research](../../actors/imperva/index.html) | 4 | 0 | 1 | [imperva-none](../../facts/imperva-none/index.html) [ac-high](../../facts/ac-high/index.html) [waf-nine-hours](../../facts/waf-nine-hours/index.html) |
| [OpenAI](../../actors/openai/index.html) | 4 | 0 | 4 | [scale-70pc-websites](../../facts/scale-70pc-websites/index.html) [ai-found](../../facts/ai-found/index.html) [ahead-of-attackers](../../facts/ahead-of-attackers/index.html) |
| [Fastly](../../actors/fastly/index.html) | 3 | 0 | 1 | [ac-high](../../facts/ac-high/index.html) [more-paths](../../facts/more-paths/index.html) [waf-nine-hours](../../facts/waf-nine-hours/index.html) |
| [Huntress](../../actors/huntress/index.html) | 3 | 0 | 1 | [huntress-none](../../facts/huntress-none/index.html) [pocs-wrong](../../facts/pocs-wrong/index.html) |
| VulnCheck | 3 | 0 | 0 | [scale-2.6m-hosts](../../facts/scale-2.6m-hosts/index.html) [pocs-wrong](../../facts/pocs-wrong/index.html) |
| [Akamai](../../actors/akamai/index.html) | 2 | 0 | 2 | [waf-nine-hours](../../facts/waf-nine-hours/index.html) [kev-precedent](../../facts/kev-precedent/index.html) |
| Censys | 2 | 0 | 0 | [scale-2.6m-hosts](../../facts/scale-2.6m-hosts/index.html) |
| [Weird Gloop (cookmeplox)](../../actors/weirdgloop/index.html) | 2 | 0 | 1 | [weirdgloop-13h](../../facts/weirdgloop-13h/index.html) |
| [watchTowr](../../actors/watchtowr/index.html) | 2 | 0 | 2 | [watchtowr-itw](../../facts/watchtowr-itw/index.html) |
| ELLIO | 1 | 0 | 0 |  |
| Fortinet | 1 | 0 | 2 | [waf-nine-hours](../../facts/waf-nine-hours/index.html) |
| Oxford City Council | 1 | 0 | 0 | [oxford](../../facts/oxford/index.html) |
| Palo Alto Networks Unit 42 part of Palo Alto Networks | 1 | 0 | 0 |  |
| [Quarkslab, OSTIF](../../actors/quarkslab/index.html) | 1 | 0 | 1 | [quarkslab-redacted](../../facts/quarkslab-redacted/index.html) |
| The City of Edinburgh Council | 1 | 0 | 2 | [edinburgh](../../facts/edinburgh/index.html) |
| [The Dutch government](../../actors/rijksoverheid/index.html) | 1 | 0 | 2 | [nl-offline](../../facts/nl-offline/index.html) |
| The Wikimedia Foundation | 1 | 0 | 1 | [wikimedia-precaution](../../facts/wikimedia-precaution/index.html) |
| [Valtori and NCSC-FI](../../actors/valtori/index.html) | 1 | 0 | 1 | [fi-offline](../../facts/fi-offline/index.html) |
| ANTS (France Titres) part of French Ministry of the Interior | 0 | 0 | 1 |  |
| Arctic Wolf Labs | 0 | 0 | 1 |  |
| Armis | 0 | 0 | 1 |  |
| Broadcom (Symantec) | 0 | 0 | 1 |  |
| [Chainguard](../../actors/chainguard/index.html) | 0 | 0 | 0 |  |
| Cisco | 0 | 0 | 1 |  |
| CybelAngel | 0 | 0 | 1 |  |
| EPFL | 0 | 0 | 1 |  |
| Equixly | 0 | 0 | 1 |  |
| French Ministry of the Interior | 0 | 0 | 1 |  |
| Lorikeet Security | 0 | 0 | 1 |  |
| Palo Alto Networks | 0 | 0 | 1 |  |
| Prophet Security | 0 | 0 | 1 |  |
| Préfecture de police (Paris) part of French Ministry of the Interior | 0 | 0 | 2 |  |
| Préfecture du Nord part of French Ministry of the Interior | 0 | 0 | 1 |  |
| Préfecture du Rhône part of French Ministry of the Interior | 0 | 0 | 1 |  |
| QNAP | 0 | 0 | 2 |  |
| Qualys | 0 | 0 | 1 |  |
| Recorded Future | 0 | 0 | 1 |  |
| Rocket Boys LLC (合同会社ロケットボーイズ) | 0 | 0 | 1 |  |
| SOCRadar | 0 | 0 | 1 |  |
| Safeguard | 0 | 0 | 2 |  |
| Sansec | 0 | 0 | 1 |  |
| SentinelOne | 0 | 0 | 1 |  |
| Socket | 0 | 0 | 1 |  |
| Tenable | 0 | 0 | 1 |  |
| Université de Genève | 0 | 0 | 2 |  |
| latvija.gov.lv, the Latvian state portal | 0 | 0 | 1 |  |

## Agency (17)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| CISA member of National agencies | 7 | 0 | 6 | [waf](../../facts/waf/index.html) [cisa-none](../../facts/cisa-none/index.html) [offline-cisa](../../facts/offline-cisa/index.html) [kev-precedent](../../facts/kev-precedent/index.html) |
| CERT.LV member of National agencies | 5 | 0 | 1 | [scale-latvia](../../facts/scale-latvia/index.html) [latvia-attempts](../../facts/latvia-attempts/index.html) [latvia-offline](../../facts/latvia-offline/index.html) |
| NCSC-NL part of The Dutch government; member of National agencies | 3 | 0 | 5 | [versions-old](../../facts/versions-old/index.html) [scale-ncsc-nl](../../facts/scale-ncsc-nl/index.html) |
| CERT-EU member of National agencies | 2 | 0 | 1 | [leak-watchtowr](../../facts/leak-watchtowr/index.html) |
| CERT-FR (ANSSI) member of National agencies | 2 | 0 | 1 | [versions-old](../../facts/versions-old/index.html) [release-time](../../facts/release-time/index.html) |
| NCSC New Zealand member of National agencies | 2 | 0 | 2 | [nz-active](../../facts/nz-active/index.html) |
| NSA Cybersecurity member of National agencies | 2 | 0 | 4 | [offline-nsa](../../facts/offline-nsa/index.html) [gov-patch-required](../../facts/gov-patch-required/index.html) |
| ACN / CSIRT Italia member of National agencies | 1 | 0 | 1 |  |
| ASD's ACSC member of National agencies | 1 | 0 | 3 |  |
| Canadian Centre for Cyber Security (CCCS) member of National agencies | 1 | 0 | 2 |  |
| UK NCSC member of National agencies | 1 | 0 | 1 | [offline-ncsc](../../facts/offline-ncsc/index.html) |
| CCN-CERT member of National agencies | 0 | 0 | 1 |  |
| CNCS member of National agencies | 0 | 0 | 1 |  |
| ENISA CSIRTs Network member of National agencies | 0 | 0 | 1 |  |
| JPCERT/CC member of National agencies | 0 | 0 | 2 |  |
| NÚKIB member of National agencies | 0 | 0 | 1 |  |
| Swiss BACS (NCSC) member of National agencies | 0 | 0 | 2 |  |

## Person (20)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| [Jakub Zelenka (bukka), PHP security team](../../actors/zelenka/index.html) member of The PHP security team | 5 | 0 | 4 | [two-cves-9.2](../../facts/two-cves-9.2/index.html) [rce-fpm](../../facts/rce-fpm/index.html) [four-reporters](../../facts/four-reporters/index.html) [fix-engine](../../facts/fix-engine/index.html) |
| [Alan Woodward, Surrey Centre for Cyber Security](../../actors/woodward/index.html) | 4 | 0 | 0 | [scale-30m](../../facts/scale-30m/index.html) [probing](../../facts/probing/index.html) |
| [Alexandre Daubois, PHP security team](../../actors/daubois/index.html) member of The PHP security team | 3 | 0 | 1 | [leak-hn](../../facts/leak-hn/index.html) [leak-watchtowr](../../facts/leak-watchtowr/index.html) [release-time](../../facts/release-time/index.html) |
| [Dan Lorenc, Chainguard](../../actors/chainguard-lorenc/index.html) works for Chainguard | 3 | 0 | 0 | [chainguard](../../facts/chainguard/index.html) [lorenc-ai-found](../../facts/lorenc-ai-found/index.html) |
| [Matthew Prince, Cloudflare CEO](../../actors/prince/index.html) works for Cloudflare | 3 | 0 | 1 | [cf-millions](../../facts/cf-millions/index.html) |
| Ryan Austin, Calif works for Calif | 2 | 0 | 1 | [no-exploitation](../../facts/no-exploitation/index.html) |
| David Lopez-Kurtz | 1 | 0 | 1 | [quarkslab-redacted](../../facts/quarkslab-redacted/index.html) |
| rjmendez member of Community detection authors | 1 | 0 | 1 | [pocs-wrong](../../facts/pocs-wrong/index.html) |
| 'sps', OpenAI Developer Community | 0 | 0 | 1 |  |
| Aaron Rainbolt | 0 | 0 | 0 |  |
| Alan Coopersmith, Oracle | 0 | 0 | 1 |  |
| Blevene member of Community detection authors | 0 | 0 | 1 |  |
| Christian Fischer, Greenbone | 0 | 0 | 0 |  |
| Feross Aboukhadijeh | 0 | 0 | 1 |  |
| Lexsah member of Community detection authors | 0 | 0 | 1 |  |
| Silas Cutler | 0 | 0 | 1 |  |
| Yves-Alexis Perez, Debian | 0 | 0 | 0 |  |
| adoy, PHP release manager member of The PHP Group / php.net | 0 | 0 | 1 |  |
| allixsenos | 0 | 0 | 0 |  |
| darkfibr (Mike Haddock) member of Community detection authors | 0 | 0 | 1 |  |

## Group (5)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| The PHP security team part of The PHP Group / php.net | 3 | 0 | 0 | [rce-modphp](../../facts/rce-modphp/index.html) [fix-bailout](../../facts/fix-bailout/index.html) [only-update](../../facts/only-update/index.html) |
| [Arnaud Le Blanc and the PHP fix authors](../../actors/leblanc/index.html) member of The PHP security team | 2 | 0 | 0 | [fix-authored](../../facts/fix-authored/index.html) [fix-engine](../../facts/fix-engine/index.html) |
| Replies on oss-security: Aaron Rainbolt, Yves-Alexis Perez, Christian Fischer | 0 | 1 | 1 |  |
| [Community detection authors](../../actors/detectors/index.html) | 0 | 0 | 0 |  |
| [National agencies](../../actors/agencies/index.html) | 0 | 0 | 0 |  |

## Outlet (140)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| [BBC News](../../actors/bbc/index.html) | 3 | 11 | 1 | [disclosure-22oct](../../facts/disclosure-22oct/index.html) [offline-allies](../../facts/offline-allies/index.html) [affected-sites](../../facts/affected-sites/index.html) |
| [The Hacker News](../../actors/thn/index.html) | 0 | 8 | 3 |  |
| Insurance Business | 1 | 2 | 3 | [uk-list](../../facts/uk-list/index.html) |
| SecurityWeek | 0 | 3 | 3 |  |
| East Anglian Daily Times (PA) | 0 | 2 | 1 |  |
| Global Banking and Finance Review | 0 | 2 | 2 |  |
| LBC | 1 | 1 | 1 | [uk-list](../../facts/uk-list/index.html) |
| The Cyber Express | 0 | 2 | 1 |  |
| The Register | 0 | 2 | 2 |  |
| Actu17 | 0 | 1 | 1 |  |
| CNN | 0 | 1 | 2 |  |
| Dark Reading | 0 | 1 | 1 |  |
| Edinburgh Evening News | 0 | 1 | 1 |  |
| Helsinki Times | 0 | 1 | 1 |  |
| Newsweek | 0 | 1 | 2 |  |
| Oxford Chronicle | 0 | 1 | 1 |  |
| RTÉ | 0 | 1 | 1 |  |
| TPO.nl | 0 | 1 | 2 |  |
| The Record part of Recorded Future | 0 | 1 | 2 |  |
| The Scotsman | 0 | 1 | 2 |  |
| Yle | 0 | 1 | 1 |  |
| 01net | 0 | 0 | 1 |  |
| 20 Minuten | 0 | 0 | 2 |  |
| 20minutos | 0 | 0 | 1 |  |
| ABC News (Australia) | 0 | 0 | 2 |  |
| AG Connect | 0 | 0 | 1 |  |
| AI4Business | 0 | 0 | 1 |  |
| ActuIA | 0 | 0 | 1 |  |
| Agencia Andina | 0 | 0 | 1 |  |
| Analytics Insight | 0 | 0 | 1 |  |
| Ars Technica | 0 | 0 | 1 |  |
| AsiaOne | 0 | 0 | 1 |  |
| BankInfoSecurity | 0 | 0 | 1 |  |
| Bitpage.de | 0 | 0 | 1 |  |
| BleepingComputer | 0 | 0 | 2 |  |
| Blog du Modérateur (BDM) | 0 | 0 | 1 |  |
| Bloomberg | 0 | 0 | 1 |  |
| BornCity | 0 | 0 | 1 |  |
| Boursorama | 0 | 0 | 1 |  |
| Bursa Hakimiyet | 0 | 0 | 1 |  |
| CNA (Channel NewsAsia) | 0 | 0 | 1 |  |
| CNN Portugal | 0 | 0 | 1 |  |
| CRN | 0 | 0 | 1 |  |
| Canaltech | 0 | 0 | 1 |  |
| Clarín (English edition) | 0 | 0 | 1 |  |
| Clickx | 0 | 0 | 1 |  |
| Coingape | 0 | 0 | 1 |  |
| Cointelegraph Brasil | 0 | 0 | 1 |  |
| Computable.nl | 0 | 0 | 1 |  |
| Computer Weekly | 0 | 0 | 1 |  |
| Computerworld España | 0 | 0 | 1 |  |
| Critic Arad | 0 | 0 | 1 |  |
| Cyber Kendra | 0 | 0 | 1 |  |
| Cyber Press | 0 | 0 | 1 |  |
| CyberScoop | 0 | 0 | 1 |  |
| Cybernews | 0 | 0 | 1 |  |
| DELFI | 0 | 0 | 1 |  |
| Der Tagesspiegel | 0 | 0 | 1 |  |
| DiarioBitcoin | 0 | 0 | 1 |  |
| Dutch IT Leaders | 0 | 0 | 1 |  |
| Everyeye Tech | 0 | 0 | 1 |  |
| Fortune | 0 | 0 | 1 |  |
| GinjFo | 0 | 0 | 1 |  |
| Global News | 0 | 0 | 1 |  |
| HardwareCooking | 0 | 0 | 1 |  |
| Help Net Security | 0 | 0 | 1 |  |
| How-To Geek | 0 | 0 | 1 |  |
| ICTjournal | 0 | 0 | 1 |  |
| IDX Channel | 0 | 0 | 1 |  |
| INTERNET Watch (Impress) | 0 | 0 | 1 |  |
| IT Social | 0 | 0 | 1 |  |
| ITdaily | 0 | 0 | 1 |  |
| India TV News | 0 | 0 | 1 |  |
| Infopoint Security | 0 | 0 | 1 |  |
| Information Age (ACS) | 0 | 0 | 1 |  |
| Infosecurity Magazine | 0 | 0 | 1 |  |
| Insider Paper | 0 | 0 | 1 |  |
| J-CAST News | 0 | 0 | 0 |  |
| Jornal de Notícias | 0 | 0 | 1 |  |
| Journal du Canada | 0 | 0 | 1 |  |
| Journal du Coin | 0 | 0 | 1 |  |
| Koran Jakarta | 0 | 0 | 1 |  |
| Kyodo News | 0 | 0 | 1 |  |
| L'essentiel | 0 | 0 | 1 |  |
| La Libre Belgique | 0 | 0 | 1 |  |
| Le Monde Informatique | 0 | 0 | 1 |  |
| Le Temps | 0 | 0 | 1 |  |
| LeBigData.fr | 0 | 0 | 1 |  |
| Les Affaires | 0 | 0 | 1 |  |
| Linternaute | 0 | 0 | 1 |  |
| Lupa.cz | 0 | 0 | 1 |  |
| Mado no Mori (窓の杜) | 0 | 0 | 1 |  |
| Marketing4eCommerce | 0 | 0 | 1 |  |
| Mashable | 0 | 0 | 0 |  |
| Mashable India | 0 | 0 | 1 |  |
| MediaNama | 0 | 0 | 1 |  |
| Morocco World News | 0 | 0 | 1 |  |
| News9Live | 0 | 0 | 1 |  |
| Người Quan Sát | 0 | 0 | 1 |  |
| Notebookcheck.it | 0 | 0 | 1 |  |
| ORF | 0 | 0 | 1 |  |
| PA Media (the Press Association) | 0 | 0 | 0 |  |
| PCMag | 0 | 0 | 1 |  |
| Paperjam | 0 | 0 | 1 |  |
| Polinews | 0 | 0 | 1 |  |
| QA Financial | 0 | 0 | 1 |  |
| RTL.de | 0 | 0 | 1 |  |
| RTVE | 0 | 0 | 1 |  |
| Reuters | 0 | 0 | 0 |  |
| SAPO Tek | 0 | 0 | 1 |  |
| Salzburg24 | 0 | 0 | 1 |  |
| Sankei Shimbun | 0 | 0 | 1 |  |
| Search Engine Roundtable | 0 | 0 | 1 |  |
| Security.NL | 0 | 0 | 2 |  |
| Shinailbo (신아일보) | 0 | 0 | 1 |  |
| SiliconANGLE | 0 | 0 | 1 |  |
| TechTarget | 0 | 0 | 1 |  |
| TechTarget Japan | 0 | 0 | 1 |  |
| Techaeris | 0 | 0 | 1 |  |
| Techzine Global | 0 | 0 | 1 |  |
| The Economic Times | 0 | 0 | 1 |  |
| The Indian Express | 0 | 0 | 1 |  |
| The Mandarin | 0 | 0 | 1 |  |
| The Star | 0 | 0 | 1 |  |
| The Verge | 0 | 0 | 1 |  |
| The420.in | 0 | 0 | 1 |  |
| Trak.in | 0 | 0 | 1 |  |
| TugaTech | 0 | 0 | 1 |  |
| TuttoTech | 0 | 0 | 1 |  |
| USA Today | 0 | 0 | 1 |  |
| WIRED | 0 | 0 | 1 |  |
| Wikipedia (English) part of The Wikimedia Foundation | 0 | 0 | 9 |  |
| Yahoo | 0 | 0 | 1 |  |
| Yahoo! News Japan | 0 | 0 | 2 |  |
| ZATAZ | 0 | 0 | 1 |  |
| dpa (Deutsche Presse-Agentur) | 0 | 0 | 0 |  |
| la Repubblica | 0 | 0 | 1 |  |
| php[architect] | 0 | 0 | 1 |  |
| shattered.io | 0 | 0 | 1 |  |
| watson | 0 | 0 | 1 |  |

## Registry (2)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| The CVE Program | 1 | 0 | 12 | [ac-high](../../facts/ac-high/index.html) |
| NIST National Vulnerability Database | 0 | 0 | 2 |  |

## Project (3)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| php/php-src part of The PHP Group / php.net | 1 | 0 | 3 |  |
| PHPocalypse Tracker | 0 | 0 | 1 |  |
| php2shell.com, the joint microsite of OpenAI, Wiz and Calif | 0 | 0 | 1 |  |

## Platform (2)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| X (Twitter) | 1 | 0 | 0 |  |
| nitter.net, an X mirror | 0 | 0 | 1 |  |

## Unnamed (1)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| Unnamed sources | 4 | 0 | 0 | [cvss-10](../../facts/cvss-10/index.html) [fix-incomplete](../../facts/fix-incomplete/index.html) [vibe-code](../../facts/vibe-code/index.html) |

## This-site (1)

| Party | States | Relays | Sources published | Claims it states |
|---|---|---|---|---|
| This site (php.oct.2026.newsroom.sgit.ai) | 1 | 0 | 0 | [no-confirmed-compromise](../../facts/no-confirmed-compromise/index.html) |

The file is [data/entities.json](../../data/entities.json), with who states each row in [data/attribution.json](../../data/attribution.json). A party with a page of its own links to it.


---
site v0.14.6 · data as of 2026-10-23T16:04Z · vault commit 1845598d9a38 · https://php.oct.2026.newsroom.sgit.ai/graph/parties/index.html