# Source: Due gravi falle in PHP mandano offline i siti web governativi

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

TuttoTech.net: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Due gravi falle in PHP mandano offline i siti web governativi

**TuttoTech.net** · [https://www.tuttotech.net/news/2026/10/22/vulnerabilita-php.html](https://www.tuttotech.net/news/2026/10/22/vulnerabilita-php.html) · published 2026-10-22T16:41:29+02:00 · added by `curator@php.newsroom` · slug `tuttotech-news-2026-10-22-vulnerabilita-php-html`

Promoted from the source watch (oq9gflln), snapshot 20261022T181608Z. 7 new items in it: TuttoTech reports government shutdowns in the Netherlands, France, Denmark and Finland, plus Canada, Wikipedia and the Internet Archive. It covers the AI discovery and AWS's early detection, and cites Censys data that 1.

## What it says, as the collector read it

#### Due gravi falle in PHP mandano offline i siti web governativi

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`), page `it/news/tuttotech/news-2026-10-22-vulnerabilita-php-html`, snapshot `20261022T181608Z`. Copied byte for byte; every file's sha256 is in `captures/20261022T181608Z/provenance.json`. Publisher: TuttoTech.net. Language: it. URL: https://www.tuttotech.net/news/2026/10/22/vulnerabilita-php.html

#### What the page says

_The watch reader's English summary (researcher@php.newsroom, languages pass of 22 October 2026), not the publisher's words:_

TuttoTech reports government shutdowns in the Netherlands, France, Denmark and Finland, plus Canada, Wikipedia and the Internet Archive. It covers the AI discovery and AWS's early detection, and cites Censys data that 1.5 million of 2.6 million hosts ran unpatched PHP.

#### Verbatim quotes, with the watch reader's translation

Each quote is in the snapshot as served. The English is the source watch reader's translation (`translations/it/news/tuttotech/news-2026-10-22-vulnerabilita-php-html.json`), not the publisher's and not checked word for word by the curator.

**offline**: In the Netherlands, Overheid.nl, the Port of Rotterdam, football federation KNVB, the five largest political parties' sites and several hospital portals went offline.

> nei Paesi Bassi lo stop ha interessato anche il portale governativo Overheid.nl, il porto di Rotterdam, la federazione calcistica nazionale KNVB, i siti dei cinque maggiori partiti politici e diversi portali ospedalieri.

_Watch reader's translation:_ in the Netherlands the shutdown also affected the government portal Overheid.nl, the port of Rotterdam, the national football federation KNVB, the sites of the five largest political parties and several hospital portals.

**offline**: In Denmark, Kombit, the IT company running municipal services, temporarily shut several platforms including the national school communication system.

> In Danimarca, Kombit, l’azienda informatica che gestisce servizi per i comuni, ha annunciato la chiusura temporanea di diverse piattaforme, compreso il sistema nazionale di comunicazione scolastica.

_Watch reader's translation:_ In Denmark, Kombit, the IT company that manages services for municipalities, announced the temporary closure of several platforms, including the national school communication system.

**offline**: France's Interior Ministry put its websites into preventive maintenance mode.

> La Francia ha adottato una misura analoga, con il Ministero dell’Interno che ha posto i propri siti web in modalità di manutenzione preventiva.

_Watch reader's translation:_ France adopted a similar measure, with the Interior Ministry putting its websites into preventive maintenance mode.

**offline**: In Canada the temporary suspension of some services was announced.

> Anche in Canada è stata annunciata la sospensione temporanea di alcuni servizi

_Watch reader's translation:_ In Canada too, the temporary suspension of some services was announced

**offline**: The Internet Archive said it briefly paused some activities to deal with the issue.

> Internet Archive ha dichiarato di aver interrotto brevemente alcune attività per affrontare il problema.

_Watch reader's translation:_ The Internet Archive said it briefly interrupted some activities to address the problem.

**number**: Censys data: about 1.5 million of 2.6 million hosts reported a PHP version for which no fix was available.

> secondo i dati della società di analisi Censys, circa 1,5 milioni di host su 2,6 milioni segnalavano l’utilizzo di una versione di PHP per la quale non era disponibile una correzione.

_Watch reader's translation:_ according to data from analytics firm Censys, about 1.5 million of 2.6 million hosts reported using a PHP version for which no fix was available.

**official**: Costin Raiu, co-founder of research firm TLP, described a race to exploitation and warned of large-scale compromise of vulnerable web servers.

> Costin Raiu, cofondatore della società di ricerca sulla sicurezza informatica e di risposta agli incidenti TLP, ha descritto questa dinamica come una corsa allo sfruttamento delle falle

_Watch reader's translation:_ Costin Raiu, co-founder of the security research and incident response firm TLP, described this dynamic as a race to exploit the flaws

#### Why it is here

From the promotion queue (`index/promote.json`, priority 2): 7 new items in it: TuttoTech reports government shutdowns in the Netherlands, France, Denmark and Finland, plus Canada, Wikipedia and the Internet Archive. It covers the AI discovery and AWS's early detection, and cites Censys data that 1.

Supports: translations/it/news/tuttotech/news-2026-10-22-vulnerabilita-php-html.json

#### Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T181608Z · HTTP 200 · https://www.tuttotech.net/news/2026/10/22/vulnerabilita-php.html- `headers.json` a1887304d23ff9d1adb3f4ea5a2ab31d260170b5c193a662ee297f69283fd170 794 bytes
- `page.html` d565db358e1e3174b9bee376602cb8654314a0e1b36d29b47478e8730b12c075 206,784 bytes
- `provenance.json` 6f96056f90767210f819d3048606463447f461b4558c9d8f322f7a103687b0a3 1,660 bytes
- `rendered.html` e555f146d258fe7ed6e95496fb0cd0daa3d9a4e40db7b332d71a234c93d20e22 211,746 bytes
- `screenshot.jpg` 3b6f02b69024fd2de862fe8555157c453c8fef3e29b2b7f720ed33f226bff325 676,024 bytes
- `text.txt` cd3f99c6c9f942595087eaa47ae8e71639cd4526a4453110ddd6a6365de3ae26 11,890 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.10.9 · data as of 2026-10-23T01:20Z · vault commit f3c5db0d9873 · https://php.oct.2026.newsroom.sgit.ai/sources/tuttotech-news-2026-10-22-vulnerabilita-php-html/index.html
