Story written here by this site, signed and dated. By the journalist Research or story?
Views: the journalist's reading of where things stand
Two things, kept apart. The state of affairs is one living page: what is known now, with the measures that say so, rewritten whenever the evidence moves enough to matter. Every version is kept, and every change can be seen, measure by measure and line by line. The analyses are the journalist's dated stories, each written against one state of the evidence and kept as written.
The state of affairs, now
The analyses
- What changed in a day: no victim yet, four named cases tested, a patch moving through the supply chain, and firewalls on the list 2026-10-23
- Why can't every version of PHP just be patched? 2026-10-22
- Where php2shell stands: many sites dark, millions of attempts, no confirmed breach 2026-10-22
- Exposed is not exploited: the sites php2shell did not hit, and what a hit will admit 2026-10-22