Due gravi falle in PHP mandano offline i siti web governativi

Due gravi falle in PHP mandano offline i siti web governativi

Promoted by curator@php.newsroom from the source watch (vault oq9gflln), page it/news/tuttotech/news-2026-10-22-vulnerabilita-php-html, snapshot 20261022T181608Z. Copied byte for byte; every file's sha256 is in captures/20261022T181608Z/provenance.json. Publisher: TuttoTech.net. Language: it. URL: https://www.tuttotech.net/news/2026/10/22/vulnerabilita-php.html

What the page says

_The watch reader's English summary (researcher@php.newsroom, languages pass of 22 October 2026), not the publisher's words:_

TuttoTech reports government shutdowns in the Netherlands, France, Denmark and Finland, plus Canada, Wikipedia and the Internet Archive. It covers the AI discovery and AWS's early detection, and cites Censys data that 1.5 million of 2.6 million hosts ran unpatched PHP.

Verbatim quotes, with the watch reader's translation

Each quote is in the snapshot as served. The English is the source watch reader's translation (translations/it/news/tuttotech/news-2026-10-22-vulnerabilita-php-html.json), not the publisher's and not checked word for word by the curator.

offline: In the Netherlands, Overheid.nl, the Port of Rotterdam, football federation KNVB, the five largest political parties' sites and several hospital portals went offline.

> nei Paesi Bassi lo stop ha interessato anche il portale governativo Overheid.nl, il porto di Rotterdam, la federazione calcistica nazionale KNVB, i siti dei cinque maggiori partiti politici e diversi portali ospedalieri.

_Watch reader's translation:_ in the Netherlands the shutdown also affected the government portal Overheid.nl, the port of Rotterdam, the national football federation KNVB, the sites of the five largest political parties and several hospital portals.

offline: In Denmark, Kombit, the IT company running municipal services, temporarily shut several platforms including the national school communication system.

> In Danimarca, Kombit, l’azienda informatica che gestisce servizi per i comuni, ha annunciato la chiusura temporanea di diverse piattaforme, compreso il sistema nazionale di comunicazione scolastica.

_Watch reader's translation:_ In Denmark, Kombit, the IT company that manages services for municipalities, announced the temporary closure of several platforms, including the national school communication system.

offline: France's Interior Ministry put its websites into preventive maintenance mode.

> La Francia ha adottato una misura analoga, con il Ministero dell’Interno che ha posto i propri siti web in modalità di manutenzione preventiva.

_Watch reader's translation:_ France adopted a similar measure, with the Interior Ministry putting its websites into preventive maintenance mode.

offline: In Canada the temporary suspension of some services was announced.

> Anche in Canada è stata annunciata la sospensione temporanea di alcuni servizi

_Watch reader's translation:_ In Canada too, the temporary suspension of some services was announced

offline: The Internet Archive said it briefly paused some activities to deal with the issue.

> Internet Archive ha dichiarato di aver interrotto brevemente alcune attività per affrontare il problema.

_Watch reader's translation:_ The Internet Archive said it briefly interrupted some activities to address the problem.

number: Censys data: about 1.5 million of 2.6 million hosts reported a PHP version for which no fix was available.

> secondo i dati della società di analisi Censys, circa 1,5 milioni di host su 2,6 milioni segnalavano l’utilizzo di una versione di PHP per la quale non era disponibile una correzione.

_Watch reader's translation:_ according to data from analytics firm Censys, about 1.5 million of 2.6 million hosts reported using a PHP version for which no fix was available.

official: Costin Raiu, co-founder of research firm TLP, described a race to exploitation and warned of large-scale compromise of vulnerable web servers.

> Costin Raiu, cofondatore della società di ricerca sulla sicurezza informatica e di risposta agli incidenti TLP, ha descritto questa dinamica come una corsa allo sfruttamento delle falle

_Watch reader's translation:_ Costin Raiu, co-founder of the security research and incident response firm TLP, described this dynamic as a race to exploit the flaws

Why it is here

From the promotion queue (index/promote.json, priority 2): 7 new items in it: TuttoTech reports government shutdowns in the Netherlands, France, Denmark and Finland, plus Canada, Wikipedia and the Internet Archive. It covers the AI discovery and AWS's early detection, and cites Censys data that 1.

Supports: translations/it/news/tuttotech/news-2026-10-22-vulnerabilita-php-html.json

Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.