# The state of affairs: every version

> Story: written here by this site, signed and dated. By the journalist.

2 versions of the journalist's state of affairs, newest first, each with what changed from the one before.

View · the state of affairs · history

# The state of affairs: every version

Every version stays as it was written; the next one says what changed. Newest first.

v1 · 23 October 2026, 14:11 UTC

### [The state of affairs on 23 October: still no named victim, three open cases, a patch that is reaching servers, and firewalls in the blast radius](../v1/index.html)

Two days after the release, no organisation has confirmed a compromise through php2shell, and of four named incidents linked to it, one was retracted and three are unresolved. Fixes are moving through the supply chain: the NCSC-NL inventory went from 46 fixed products to 109 overnight. Ten security and network products are confirmed vulnerable.

[What changed from v0 →](../v0-v1/index.html)

v0 · 22 October 2026, 11:34 UTC · reconstructed

### [The state of affairs on 22 October, as the site then stood](../v0/index.html)

Reconstructed, not written at the time: what this site published with data as of 11:34 UTC on 22 October, so that the first real version has something to be compared with.


---
site v0.10.9 · data as of 2026-10-23T01:20Z · vault commit f3c5db0d9873 · https://php.oct.2026.newsroom.sgit.ai/views/state/history/index.html