Source · social · primary · captured

NSA Cyber on X: Effective Immediately ... two critical vulnerabilities

NSA Cybersecurity (@NSACyber) · https://x.com/NSACyber/status/2112903220209098897 · published 2026-10-21T13:45:58Z · added by collector-gov · slug nsa-x-2112903220209098897

First NSA post (pinned). Time from tweet snowflake ID = 2026-10-21T13:45:58Z; the page shows '13:45 · 21 Oct 2026' (UTC browser). 10.1M views at capture. 'If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated.'

If an immediate update is not feasible, take the system of…2026-10-21 13:45:58 UTC: NSA Cybersecurity posts on X: 'Ef…10.1 million views of the NSA Cyber post, at captureNSA Cyber on X

What it says, as the collector read it

NSA Cyber X post 1 (the "two critical vulnerabilities" post)

  • URL: https://x.com/NSACyber/status/2112903220209098897. Also pinned on the profile (captured as nsa-x-nsacyber).
  • Posted 2026-10-21T13:45:58Z (decoded from the snowflake ID: (id>>22)+1288834974657 ms). The page shows "13:45 · 21 Oct 2026"; the capture browser ran in UTC.
  • Captured 2026-10-22T08:09:54Z. Counts at capture: 10.1M views, 1.1K replies, 9.5K reposts, 63K likes, 15K bookmarks.
  • Full text, verbatim (the typo "it is recommend" is in the original): > Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
  • Note the timing. The post says "be prepared for an update", so it reads as if it came before the patch, or with it. The NSA press release says PHP released its patch "Wednesday, October 21, 2026".
  • Mirrors: nitter.net now serves only a shutdown notice (X C&D letters, update dated 10 Oct 2026), captured as nsa-x-nsacyber-nitter. xcancel.com returned HTTP 451 to curl.

Claims that cite it

ClaimWho says itStatusPrimarySources
If an immediate update is not feasible, take the system offline until it can be fully mitigated
X post 13:45:58Z 21 October (10.1 million views at capture) and the press release.
NSA Cybersecurityconfirmed2/2NSA Cyber on X NSA

Events that cite it

WhenEventTime is
2026-10-21 13:45:58 UTCNSA Cybersecurity posts on X: 'Effective Immediately ... be prepared for an update addressing two critical vulnerabilities ... take the system offline'.stated

Numbers from this source

FigureOfStatus
10.1 millionviews of the NSA Cyber post, at captureconfirmed

Agency rows from this source

The bytes

capture 20261022T080954Z · HTTP 200 · https://x.com/NSACyber/status/2112903220209098897
  • headers.json 2b72f04731267bb06c6ed80fb9fab697c55697ef2b83303924c315720ed63729 9,020 bytes
  • page.html 49362e7db1112702cb4586ed77daa898c86293d85b5ebe33b7a7dca7db1396a2 139,058 bytes
  • provenance.json 569e1386915c3d850f140375196be63051f6099dd3eaa803bee46f3d014e8984 1,240 bytes
  • rendered.html a95403e3cb7230cb93a3aad7f6f4a09998596f2636f7516355cf3d52bb8fcf58 162,779 bytes
  • screenshot.png f9e02ad5c04f114f4ab6cc0cd14b556924d445869fb512f4306683da40d50564 452,042 bytes
  • text.txt 92ebce791a7b35429d2fee94427932a19b1629de3821a52201648a58298d52e7 1,811 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →