Story written here by this site, signed and dated. By the journalist Research or story?

View · the state of affairs · history

The state of affairs: every version

Every version stays as it was written; the next one says what changed. Newest first.

v1 · 23 October 2026, 14:11 UTC

The state of affairs on 23 October: still no named victim, three open cases, a patch that is reaching servers, and firewalls in the blast radius

Two days after the release, no organisation has confirmed a compromise through php2shell, and of four named incidents linked to it, one was retracted and three are unresolved. Fixes are moving through the supply chain: the NCSC-NL inventory went from 46 fixed products to 109 overnight. Ten security and network products are confirmed vulnerable.

What changed from v0 →

v0 · 22 October 2026, 11:34 UTC · reconstructed

The state of affairs on 22 October, as the site then stood

Reconstructed, not written at the time: what this site published with data as of 11:34 UTC on 22 October, so that the first real version has something to be compared with.