# Source: PHP-Lücke: Millionen Angriffsversuche im Netz - news.ORF.at

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

ORF: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP-Lücke: Millionen Angriffsversuche im Netz - news.ORF.at

**ORF** · [https://orf.at/stories/3445806/](https://orf.at/stories/3445806/) · published not stated · added by `curator@php.newsroom` · slug `orf-stories-3445806`

Promoted from the source watch (oq9gflln), snapshot 20261022T181608Z. 6 new items in de: ORF reports Cloudflare's 'millions' of attack attempts and that institutions worldwide took sites offline. It names Austrian sites offline (Uni Wien, TU Wien, NÖN), quotes BSI vice-president Thomas Caspers and expert Chr

## What it says, as the collector read it

#### PHP-Lücke: Millionen Angriffsversuche im Netz - news.ORF.at

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`), page `at/news/orf/stories-3445806`, snapshot `20261022T181608Z`. Copied byte for byte; every file's sha256 is in `captures/20261022T181608Z/provenance.json`. Publisher: ORF. Language: de. URL: https://orf.at/stories/3445806/

#### What the page says

_The watch reader's English summary (researcher@php.newsroom, languages pass of 22 October 2026), not the publisher's words:_

ORF reports Cloudflare's 'millions' of attack attempts and that institutions worldwide took sites offline. It names Austrian sites offline (Uni Wien, TU Wien, NÖN), quotes BSI vice-president Thomas Caspers and expert Christoph Fischer, CERT.at's warning coordinated with the new Federal Office for Cyber Security, and Anexia's CEO confirming attack attempts.

#### Verbatim quotes, with the watch reader's translation

Each quote is in the snapshot as served. The English is the source watch reader's translation (`translations/at/news/orf/stories-3445806.json`), not the publisher's and not checked word for word by the curator.

**offline**: In Austria the websites of the University of Vienna, TU Wien and the newspaper NÖN were temporarily unreachable.

> In Österreich waren unter anderem die Websites der Uni Wien, TU Wien und der „Niederösterreichischen Nachrichten“ („NÖN“) vorübergehend nicht erreichbar.

_Watch reader's translation:_ In Austria, among others, the websites of the University of Vienna, TU Wien and the 'Niederösterreichische Nachrichten' ('NÖN') were temporarily unreachable.

**offline**: In Belgium the foreign ministry's website was offline; in the Netherlands the parliament website was also affected.

> In Belgien war unter anderem die Website des Außenministeriums offline. In den Niederlanden waren der digitale Identitätsdienst DigiD, die Parlamentswebsite und der Internetauftritt des nationalen Cybersicherheitszentrums betroffen.

_Watch reader's translation:_ In Belgium, among others, the foreign ministry's website was offline. In the Netherlands, the digital identity service DigiD, the parliament website and the website of the national cyber security centre were affected.

**agency**: CERT.at spread the warning in coordination with Austria's new Federal Office for Cyber Security, according to the Interior Ministry.

> In Österreich verbreitete unter anderem das nationale Computer Emergency Response Team (CERT.at), laut Innenministerium in Abstimmung mit dem neuen Bundesamt für Cybersicherheit, die Warnung

_Watch reader's translation:_ In Austria, the national Computer Emergency Response Team (CERT.at), according to the Interior Ministry in coordination with the new Federal Office for Cyber Security, spread the warning

**exploitation**: The CEO of Austrian cloud provider Anexia, Alexander Windbichler, confirmed attack attempts on websites operated by Anexia and said bank data was not affected.

> Auch Windbichler bestätigte Angriffsversuche auf die von Anexia betriebenen Websites.

_Watch reader's translation:_ Windbichler also confirmed attack attempts on the websites operated by Anexia.

**official**: BSI vice-president Thomas Caspers warned consumers to expect attempts in coming days to install malware via compromised websites.

> Allerdings sollten Verbraucher darauf achten „und auch damit rechnen“, dass in den nächsten Tagen über möglicherweise kompromittierte Webseiten versucht werden könnte, „Schadgut auch auf ihren Systemen“ zu installieren, warnte BSI-Vizepräsidenten Thomas Caspers.

_Watch reader's translation:_ However, consumers should watch out 'and also expect' that in the coming days attempts could be made via possibly compromised websites to install 'malware on their systems too', warned BSI vice-president Thomas Caspers.

**official**: The BSI, alongside the NSA, said unprotected websites must be shut down immediately.

> müssten ungeschützte Websites nach Ansicht des US-Geheimdienstes National Security Agency (NSA) und des deutschen Bundesamts für Sicherheit in der Informationstechnik (BSI) sofort abgeschaltet werden.

_Watch reader's translation:_ unprotected websites must be shut down immediately in the view of the US National Security Agency (NSA) and the German Federal Office for Information Security (BSI).

#### Why it is here

From the promotion queue (`index/promote.json`, priority 2): 6 new items in de: ORF reports Cloudflare's 'millions' of attack attempts and that institutions worldwide took sites offline. It names Austrian sites offline (Uni Wien, TU Wien, NÖN), quotes BSI vice-president Thomas Caspers and expert Chr

Supports: translations/at/news/orf/stories-3445806.json

#### Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T181608Z · HTTP 200 · https://orf.at/stories/3445806/- `headers.json` 7dda938522a9e06e23db8ac07a637b7a5e71391b0c097f4a60436e8eddd13bbf 970 bytes
- `page.html` fe941fbb4ff6eab5be2d373b56a1d21596fd1f7da019c049d5130aad097fa7e8 28,555 bytes
- `provenance.json` ef992ab43c609302291f8ae584725bba3392ef237c0056ddc12f7a8c826e13a6 1,506 bytes
- `rendered.html` beb03fcd0e185c838e137f6b81d3908667a6a8d3ec13468cae9670ac96ef050d 1,051,193 bytes
- `screenshot.jpg` 4bb4a201278373d57af25912a623e595853d5a34d407f448b8231da8f6a1cb3c 377,054 bytes
- `text.txt` e88c6f39edbd6d1c325ec7cc18abe50a9b8ad94010b2d5a425ba59e4252b2d0d 7,659 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.10.9 · data as of 2026-10-23T01:20Z · vault commit f3c5db0d9873 · https://php.oct.2026.newsroom.sgit.ai/sources/orf-stories-3445806/index.html
