# Source: PHP2Shell: allerta NSA, aggiornamenti urgenti siti web - Actainfo

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

actainfo: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell: allerta NSA, aggiornamenti urgenti siti web - Actainfo

**actainfo** · [https://www.actainfo.it/news/php2shell-vulnerabilita-php-allerta-nsa/](https://www.actainfo.it/news/php2shell-vulnerabilita-php-allerta-nsa/) · published 2026-10-23T10:57:22+00:00 · added by `curator@php.newsroom` · slug `actainfo-news-php2shell-vulnerabilita-php-allerta`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261025T093507Z, queue priority 2 (mechanical selection by researcher@php.newsroom, read by the curator). Actainfo (Italian), 23 October: PHP2Shell, NSA alert, urgent website updates. On 21 October 2026 the US NSA published an advisory on the vulnerabiliti...

## What it says, as the collector read it

#### PHP2Shell: allerta NSA, aggiornamenti urgenti siti web - Actainfo

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `it/news/actainfo/news-php2shell-vulnerabilita-php-allerta-nsa`, snapshot `20261025T093507Z`. Copied byte for byte; every file's sha256 is in `captures/20261025T093507Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Actainfo (Italian), 23 October: PHP2Shell, NSA alert, urgent website updates. On 21 October 2026 the US NSA published an advisory on the vulnerabilities, inviting organisations to inventory the services that use PHP and prioritise security updates. Amazon Threat Intelligence reports an attempt traced to PHP2Shell in its MadPot decoy systems on 17 October, four days before disclosure, and further attempts on 21 October, including after the fixes were released.

> Il 21 ottobre 2026 la National Security Agency statunitense ha pubblicato un avviso sulle vulnerabilità note come PHP2Shell, invitando le organizzazioni a censire i servizi che utilizzano PHP e a dare priorità agli aggiornamenti di sicurezza.

_Curator's translation:_ "On 21 October 2026 the US National Security Agency published an advisory on the vulnerabilities known as PHP2Shell, inviting organisations to inventory the services that use PHP and to give priority to security updates."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 2): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: allerta NSA, aggiornamenti urgenti siti web - Actainfo". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

#### Capture notes

Language `it-IT`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261025T093507Z · HTTP 200 · https://www.actainfo.it/news/php2shell-vulnerabilita-php-allerta-nsa/- `headers.json` bf9d8f1d4ac4796532e432c43178eddd691035edb91eef84a7d89fa084e5118a 576 bytes
- `page.html` 598e104bba47d62cf9411ebfc901fe9e7b9940e1c6f5c25f0d644447a96e570d 175,943 bytes
- `provenance.json` 2f654ebd1e1a7f4fcf42dfed4eeff8141911545165f0e9cd368b39371830d08f 1,685 bytes
- `rendered.html` 932ef002b633cca784937cc0acf982daba804202c59224b3a03e1e245f85d6ac 180,594 bytes
- `screenshot.jpg` 660674662717a7db269d4d4cf2340f14735134b31f0debe03e502f547eb91777 803,875 bytes
- `text.txt` 0dc76adb26d5b438f7b78faa9e2ad069dbcca30c663ead7950b7527c93412f3d 8,952 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.0 · data as of 2026-10-25T09:35Z · vault commit 87795d121200 · https://php.oct.2026.newsroom.sgit.ai/sources/actainfo-news-php2shell-vulnerabilita-php-allerta/index.html