Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Source · news · secondary · captured

PHP2Shell : comment protéger votre site des attaques PHP

LEBIGDATA.FR · https://www.lebigdata.fr/php2shell-des-millions-dattaques-frappent-les-sites-php-comment-vous-proteger-maintenant · published 2026-10-22T17:52:24+00:00 · added by curator@php.newsroom · slug lebigdata-php2shell-des-millions-dattaques-frappen

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 3 (mechanical selection by researcher@php.newsroom, read by the curator). LeBigData (French), 22 October: millions of attacks hit PHP sites. On 21 October the PHP team published 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two c...

What it says, as the collector read it

PHP2Shell : comment protéger votre site des attaques PHP

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page fr/news/lebigdata/php2shell-des-millions-dattaques-frappent-les-sites-php-comm, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

LeBigData (French), 22 October: millions of attacks hit PHP sites. On 21 October the PHP team published 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical engine flaws, CVE-2026-109618 and CVE-2026-109619; affected are installations serving web requests, including PHP-FPM, Apache and mod_php, php-cgi, FrankenPHP and LiteSpeed. The scale of attempts is said to have arrived within hours. A long page (about 36,000 characters); the opening was read.

> Le 21 octobre 2026, l’équipe PHP publie en urgence les versions 8.5.12, 8.4.27, 8.3.36 et 8.2.35.

_Curator's translation:_ "On 21 October 2026 the PHP team urgently published versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35."

Why it is here

From the promotion queue (index/promote.json, priority 3): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell : comment protéger votre site des attaques PHP". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

Capture notes

Language fr-FR. Nothing in the page addresses an AI or hides text from a reader.

Claims that cite it

No claim cites this source yet.

Events that cite it

No timeline event cites this source yet.

The bytes

capture 20261023T160435Z · HTTP 200 · https://www.lebigdata.fr/php2shell-des-millions-dattaques-frappent-les-sites-php-comment-vous-proteger-maintenant
  • headers.json 325a1699312af0056c6128f5688997429c86982b84b985e1be4b16a541761eac 1,558 bytes
  • page.html 117c392c1899b61bddfb4642c4c1b0c8312cd994d4f77609d015e03ce30dabae 263,406 bytes
  • provenance.json 1e935583c9e1973d5ee043c4d4dec87ec9f734eca4858f4ceb84abd62a61167c 1,800 bytes
  • rendered.html 4515761b754428c4749c875d693d19e09cdacb187f20a99bd1c736998fb6259f 375,980 bytes
  • screenshot.jpg 5849301e17ec6c999acfa4580b39b6e74ad2df2446a4862ac716272ff21d9328 872,376 bytes
  • text.txt e2295f56852e6bb0a72ce660e7a5be199cf097dfdd19e09a4a5b7cc649ad5f13 38,147 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →