Latest on PHP vulnerability as patch gets released, NSA issues warning

Latest on PHP vulnerability as patch gets released, NSA issues warning

Promoted by curator@php.newsroom from the source watch (vault oq9gflln), page us/news/usa-today/php2shell-live, snapshot 20261023T012042Z. Copied byte for byte; every file's sha256 is in captures/20261023T012042Z/provenance.json. Publisher: USA Today. Language: en. URL: https://www.usatoday.com/story/news/nation/2026/10/21/php-vulnerability-php2shell-updates--live/92362348007/

What the page says

_Curator's reading of the capture._

USA Today's live page on 21 October: the release of the patches, the NSA's warning, governments taking sites down, CERT-EU's advice to take sites down if fixes cannot be applied at once, and a Q&A for readers. Cloudflare's Daniele Molteni says Cloudflare observed exploit attempts, "including spikes of thousands of attempts", and attackers modifying tactics to bypass protections, and states that "Those observations describe attack attempts; they do not, by themselves, establish successful compromises." No organisation is named as compromised.

Why it is here

From the promotion queue (index/promote.json, priority 1): Break-in question (editor, 22 October): one of the reports read for the statement on /compromise/ ("no named organisation has said it was compromised through php2shell"). Break-in question (editor, 22 October 20:49 UTC): Cloudflare: attempts "do not, by themselves, establish successful compromises"

Supports: data/compromise.json on the site (/compromise/)

Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.