PHP2Shell: allerta NSA, aggiornamenti urgenti siti web - Actainfo

PHP2Shell: allerta NSA, aggiornamenti urgenti siti web - Actainfo

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page it/news/actainfo/news-php2shell-vulnerabilita-php-allerta-nsa, snapshot 20261025T093507Z. Copied byte for byte; every file's sha256 is in captures/20261025T093507Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Actainfo (Italian), 23 October: PHP2Shell, NSA alert, urgent website updates. On 21 October 2026 the US NSA published an advisory on the vulnerabilities, inviting organisations to inventory the services that use PHP and prioritise security updates. Amazon Threat Intelligence reports an attempt traced to PHP2Shell in its MadPot decoy systems on 17 October, four days before disclosure, and further attempts on 21 October, including after the fixes were released.

> Il 21 ottobre 2026 la National Security Agency statunitense ha pubblicato un avviso sulle vulnerabilità note come PHP2Shell, invitando le organizzazioni a censire i servizi che utilizzano PHP e a dare priorità agli aggiornamenti di sicurezza.

_Curator's translation:_ "On 21 October 2026 the US National Security Agency published an advisory on the vulnerabilities known as PHP2Shell, inviting organisations to inventory the services that use PHP and to give priority to security updates."

Why it is here

From the promotion queue (index/promote.json, priority 2): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: allerta NSA, aggiornamenti urgenti siti web - Actainfo". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

Capture notes

Language it-IT. Nothing in the page addresses an AI or hides text from a reader.