# Views: the state of affairs and the journalist's analyses

> Story: written here by this site, signed and dated. By the journalist.

The journalist's living state of affairs, versioned with every change visible, and the dated analyses behind it.

# Views: the journalist's reading of where things stand

Two things, kept apart. **The state of affairs** is one living page: what is known now, with the measures that say so, rewritten whenever the evidence moves enough to matter. Every version is kept, and every change can be seen, measure by measure and line by line. **The analyses** are the journalist's dated stories, each written against one state of the evidence and kept as written.

## The state of affairs, now

[v1: The state of affairs on 23 October: still no named victim, three open cases, a patch that is reaching servers, and firewalls in the blast radius23 October 2026, 14:11 UTC · Two days after the release, no organisation has confirmed a compromise through php2shell, and of four named incidents linked to it, one was retracted and three are unresolved. Fixes are moving through the supply chain: the NCSC-NL inventory went from 46 fixed products to 109 overnight. Ten security and network products are confirmed vulnerable.](state/index.html)

[Every version](state/history/index.html) · [what changed in the latest](state/v0-v1/index.html)

## The analyses
- [What changed in a day: no victim yet, four named cases tested, a patch moving through the supply chain, and firewalls on the list](../articles/what-changed-in-a-day/index.html) 2026-10-23
- [Why can't every version of PHP just be patched?](../articles/why-not-patch-every-version/index.html) 2026-10-22
- [Where php2shell stands: many sites dark, millions of attempts, no confirmed breach](../articles/where-php2shell-stands/index.html) 2026-10-22
- [Exposed is not exploited: the sites php2shell did not hit, and what a hit will admit](../articles/exposed-is-not-exploited/index.html) 2026-10-22


---
site v0.10.9 · data as of 2026-10-23T01:20Z · vault commit f3c5db0d9873 · https://php.oct.2026.newsroom.sgit.ai/views/index.html