# Source: NSA Cyber on X: Effective Immediately ... two critical vulnerabilities

NSA Cybersecurity (@NSACyber): what it says, the claims and events that cite it, and the hashes of every captured file.

Source · social · primary · captured

# NSA Cyber on X: Effective Immediately ... two critical vulnerabilities

**NSA Cybersecurity (@NSACyber)** · [https://x.com/NSACyber/status/2112903220209098897](https://x.com/NSACyber/status/2112903220209098897) · published 2026-10-21T13:45:58Z · added by `collector-gov` · slug `nsa-x-2112903220209098897`

First NSA post (pinned). Time from tweet snowflake ID = 2026-10-21T13:45:58Z; the page shows '13:45 · 21 Oct 2026' (UTC browser). 10.1M views at capture. 'If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated.'

## What it says, as the collector read it

#### NSA Cyber X post 1 (the "two critical vulnerabilities" post)

- URL: https://x.com/NSACyber/status/2112903220209098897. Also pinned on the profile (captured as `nsa-x-nsacyber`).

- Posted 2026-10-21T13:45:58Z (decoded from the snowflake ID: (id>>22)+1288834974657 ms). The page shows "13:45 · 21 Oct 2026"; the capture browser ran in UTC.

- Captured 2026-10-22T08:09:54Z. Counts at capture: 10.1M views, 1.1K replies, 9.5K reposts, 63K likes, 15K bookmarks.

- Full text, verbatim (the typo "it is recommend" is in the original): > Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

- Note the timing. The post says "be prepared for an update", so it reads as if it came before the patch, or with it. The NSA press release says PHP released its patch "Wednesday, October 21, 2026".

- Mirrors: nitter.net now serves only a shutdown notice (X C&D letters, update dated 10 Oct 2026), captured as `nsa-x-nsacyber-nitter`. xcancel.com returned HTTP 451 to curl.

## Claims that cite it

| Claim | Who says it | Status | Primary | Sources |
|---|---|---|---|---|
| If an immediate update is not feasible, take the system offline until it can be fully mitigatedX post 13:45:58Z 21 October (10.1 million views at capture) and the press release. | NSA Cybersecurity | confirmed | 2/2 | [NSA Cyber on X](../../sources/nsa-x-2112903220209098897/index.html) [NSA](../../sources/nsa-press-php-4630238/index.html) |

## Events that cite it

| When | Event | Time is |
|---|---|---|
| 2026-10-21 13:45:58 UTC | NSA Cybersecurity posts on X: 'Effective Immediately ... be prepared for an update addressing two critical vulnerabilities ... take the system offline'. | stated |

### Numbers from this source

| Figure | Of | Status |
|---|---|---|
| 10.1 million | views of the NSA Cyber post, at capture | confirmed |

### Agency rows from this source
- [NSA Cybersecurity](../../agencies/index.html): offline yes

## The bytes
capture 20261022T080954Z · HTTP 200 · https://x.com/NSACyber/status/2112903220209098897- `headers.json` 2b72f04731267bb06c6ed80fb9fab697c55697ef2b83303924c315720ed63729 9,020 bytes
- `page.html` 49362e7db1112702cb4586ed77daa898c86293d85b5ebe33b7a7dca7db1396a2 139,058 bytes
- `provenance.json` 569e1386915c3d850f140375196be63051f6099dd3eaa803bee46f3d014e8984 1,240 bytes
- `rendered.html` a95403e3cb7230cb93a3aad7f6f4a09998596f2636f7516355cf3d52bb8fcf58 162,779 bytes
- `screenshot.png` f9e02ad5c04f114f4ab6cc0cd14b556924d445869fb512f4306683da40d50564 452,042 bytes
- `text.txt` 92ebce791a7b35429d2fee94427932a19b1629de3821a52201648a58298d52e7 1,811 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.2.5 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/sources/nsa-x-2112903220209098897/index.html