ČVUT čelí kybernetickému útoku, údajně doplatilo na kritickou chybu v PHP - Lupa.cz

ČVUT čelí kybernetickému útoku, údajně doplatilo na kritickou chybu v PHP - Lupa.cz

Promoted by curator@php.newsroom from the source watch (vault oq9gflln), page cz/tech-press/lupa/cvut-cyber-attack, snapshot 20261022T191510Z. Copied byte for byte; every file's sha256 is in captures/20261022T191510Z/provenance.json. Publisher: Lupa.cz. Language: cs. URL: https://www.lupa.cz/aktuality/cvut-celi-kybernetickemu-utoku-doplatilo-na-kritickou-chybu-v-php

What the page says

_Curator's reading of the capture._

Lupa.cz (Iva Brejlová) reports that Czech Technical University in Prague (ČVUT) is facing a cyber attack on its IT infrastructure. It quotes ČVUT's own statement from social media: the attack is "part of worldwide attempts to hit websites using PHP", the active attack was stopped, recovery is under way, and some systems were taken offline as a precaution. Lupa adds that ČVUT gave no more detail, that it is not yet clear whether the outage really relates to PHP2Shell, and that the international security community has so far found no evidence of real exploitation. An update at 19:30 added information on monitoring of possible PHP2Shell exploitation. The article also recaps NÚKIB's advice to update, the leak via Hacker News, and shutdowns in the Netherlands, Finland, France, Germany and of the Czech Government Office's website.

> „ČVUT v současnosti řeší kybernetický útok na svou IT infrastrukturu. Jedná se o součást celosvětových pokusů zasáhnout weby s technologií PHP. Aktivní útok se podařilo zastavit a probíhají práce na řešení a obnově. Do vyřešení byly preventivně odstaveny některé systémy,“ popisuje ČVUT.

_Curator's translation:_ "ČVUT is currently dealing with a cyber attack on its IT infrastructure. It is part of worldwide attempts to hit websites using PHP technology. The active attack was stopped and work on resolution and recovery is under way. Some systems have been taken offline as a precaution until it is resolved," ČVUT says.

> Není tak zatím jasné, zda nedostupnost jejích stránek opravdu s PHP2Shell souvisí. Mezinárodní bezpečnostní komunita, která situaci monitoruje, zatím nenašla důkazy o žádném reálném zneužití zranitelností.

_Curator's translation:_ So it is not yet clear whether the unavailability of its pages really relates to PHP2Shell. The international security community monitoring the situation has so far found no evidence of any real exploitation of the vulnerabilities.

Why it is here

From the promotion queue (index/promote.json, priority 1): ČVUT says it faces an attack "part of worldwide attempts against PHP sites", active attack stopped; success unconfirmed

Supports: contradictions/compromise-cvut.json

Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.