Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

The story as a graph / Parties

Every party, whatever a page calls it

384 parties: the people, organisations, agencies, outlets and platforms that published a source or are named as saying something. The sources spell them 529 ways; each spelling resolves to one node here, so CISA is one party however many pages name it. States counts the claims, numbers and signals a party originates; relays counts those it passed on from someone else.

The graph of each party needs JavaScript; the tables below carry the same counts.

Organisation (60)

PartyStatesRelaysSources publishedClaims it states
The PHP Foundation1302rce-fpm who-first openai-same-day wiz-independent quarkslab-2024 leak-cve-ids leak-video leak-mitigations chainguard release-moved preannounce-time
Wiz Research902versions-old wordpress-drupal scale-70pc-internet scale-70pc-websites ai-found wiz-independent most-severe release-moved
Cloudflare701scale-70pc-websites cloudflare-traffic probing waf-nine-hours
Amazon (CJ Moses)601amazon-honeypot probing
The PHP Group / php.net602two-cves-9.2 rce-modphp only-update release-moved release-time
Calif401wordpress-drupal ai-found who-first quarkslab-2024
Imperva Threat Research401imperva-none ac-high waf-nine-hours
OpenAI404scale-70pc-websites ai-found ahead-of-attackers
Fastly301ac-high more-paths waf-nine-hours
Huntress301huntress-none pocs-wrong
VulnCheck300scale-2.6m-hosts pocs-wrong
Akamai202waf-nine-hours kev-precedent
Censys200scale-2.6m-hosts
Weird Gloop (cookmeplox)201weirdgloop-13h
watchTowr202watchtowr-itw
ELLIO100
Fortinet102waf-nine-hours
Oxford City Council100oxford
Palo Alto Networks Unit 42
part of Palo Alto Networks
100
Quarkslab, OSTIF101quarkslab-redacted
The City of Edinburgh Council102edinburgh
The Dutch government102nl-offline
The Wikimedia Foundation101wikimedia-precaution
Valtori and NCSC-FI101fi-offline
ANTS (France Titres)
part of French Ministry of the Interior
001
ASK Corporation (株式会社アスク)001
Arctic Wolf Labs001
Armis001
Broadcom (Symantec)001
Chainguard000
Cisco001
CloudLinux000
CybelAngel001
EPFL001
Equixly001
French Ministry of the Interior001
Lorikeet Security001
MITRE000
Malwarebytes001
Palo Alto Networks001
Prophet Security001
Préfecture de police (Paris)
part of French Ministry of the Interior
002
Préfecture du Nord
part of French Ministry of the Interior
001
Préfecture du Rhône
part of French Ministry of the Interior
001
QNAP002
Qualys001
Recorded Future001
Rocket Boys LLC (合同会社ロケットボーイズ)001
SOCRadar001
Safeguard002
Sansec001
SentinelOne001
Socket001
Tenable001
The Internet Archive000
Université de Genève002
W3Techs000
cPanel000
dexpose.io001
latvija.gov.lv, the Latvian state portal001

Agency (18)

PartyStatesRelaysSources publishedClaims it states
CISA
member of National agencies
706waf cisa-none offline-cisa kev-precedent
CERT.LV
member of National agencies
501scale-latvia latvia-attempts latvia-offline
NCSC-NL
part of The Dutch government; member of National agencies
305versions-old scale-ncsc-nl
CERT-EU
member of National agencies
201leak-watchtowr
CERT-FR (ANSSI)
member of National agencies
201versions-old release-time
NCSC New Zealand
member of National agencies
202nz-active
NSA Cybersecurity
member of National agencies
204offline-nsa gov-patch-required
ACN / CSIRT Italia
member of National agencies
101
ASD's ACSC
member of National agencies
103
Canadian Centre for Cyber Security (CCCS)
member of National agencies
102
UK NCSC
member of National agencies
101offline-ncsc
CCN-CERT
member of National agencies
001
CNCS
member of National agencies
001
Cyber Security Agency of Singapore
member of National agencies
000
ENISA CSIRTs Network
member of National agencies
001
JPCERT/CC
member of National agencies
002
NÚKIB
member of National agencies
001
Swiss BACS (NCSC)
member of National agencies
002

Person (21)

PartyStatesRelaysSources publishedClaims it states
Jakub Zelenka (bukka), PHP security team
member of The PHP security team
504two-cves-9.2 rce-fpm four-reporters fix-engine
Alan Woodward, Surrey Centre for Cyber Security400scale-30m probing
Alexandre Daubois, PHP security team
member of The PHP security team
301leak-hn leak-watchtowr release-time
Dan Lorenc, Chainguard
works for Chainguard
300chainguard lorenc-ai-found
Matthew Prince, Cloudflare CEO
works for Cloudflare
301cf-millions
Ryan Austin, Calif
works for Calif
201no-exploitation
David Lopez-Kurtz101quarkslab-redacted
rjmendez
member of Community detection authors
101pocs-wrong
'sps', OpenAI Developer Community001
Aaron Rainbolt000
Alan Coopersmith, Oracle001
Blevene
member of Community detection authors
001
Christian Fischer, Greenbone000
Feross Aboukhadijeh001
Lexsah
member of Community detection authors
001
Silas Cutler001
Yves-Alexis Perez, Debian000
adoy, PHP release manager
member of The PHP Group / php.net
001
allixsenos000
darkfibr (Mike Haddock)
member of Community detection authors
001
scherzer.dev000

Group (5)

PartyStatesRelaysSources publishedClaims it states
The PHP security team
part of The PHP Group / php.net
300rce-modphp fix-bailout only-update
Arnaud Le Blanc and the PHP fix authors
member of The PHP security team
200fix-authored fix-engine
Replies on oss-security: Aaron Rainbolt, Yves-Alexis Perez, Christian Fischer011
Community detection authors000
National agencies000

Outlet (267)

PartyStatesRelaysSources publishedClaims it states
BBC News3111disclosure-22oct offline-allies affected-sites
The Hacker News083
Insurance Business123uk-list
SecurityWeek033
East Anglian Daily Times (PA)021
Global Banking and Finance Review022
LBC111uk-list
The Cyber Express021
The Register022
Actu17011
CNN013
Dark Reading011
Edinburgh Evening News011
Helsinki Times011
Newsweek012
Oxford Chronicle011
RTÉ011
TPO.nl012
The Record
part of Recorded Future
012
The Scotsman012
Yle011
01net001
20 Minuten002
20minutos001
24 Heures001
24.ae (موقع 24)001
2days.kr001
ABC News (Australia)002
AG Connect001
AI Matters001
AI Weekly001
AI4Business001
AIT News (البوابة التقنية)001
ActuIA001
Ad-Dustour001
Agencia Andina001
Alghad001
American Banker001
Analytics Insight001
Ars Technica001
Asahi Shimbun Digital (朝日新聞デジタル)001
AsiaOne001
Australian Financial Review000
BTC-ECHO001
BankInfoSecurity001
Bgonair001
Bitpage.de001
BleepingComputer003
BlockTempo (動區動趨)001
Blog du Modérateur (BDM)001
Bloomberg001
Boan News001
BornCity001
Boursorama001
Bursa Hakimiyet001
Bursada Bugün001
Báo Gia Lai điện tử001
CEONEWS (Korea)001
CHIP001
CNA (Channel NewsAsia)001
CNBC000
CNBC Indonesia001
CNBC-TV18001
CNN Portugal001
CP24000
CRN001
Cairo 24 (القاهرة 24)001
Canaltech001
ChannelPartner001
Chinaz (站长之家)001
Clarín (English edition)001
ClearanceJobs News001
Clickx001
Clubic001
Coin Academy001
Coingape001
Coinpedia001
Cointelegraph Brasil001
Computable.be001
Computable.nl001
Computer Hoy001
Computer Weekly001
Computerworld España001
Critic Arad001
Crypto ID001
Cryptoast001
Cumhuriyet001
Cyber Daily001
Cyber Kendra001
Cyber Press001
Cyber Security 360001
Cyber Security News001
CyberScoop001
Cybernews001
DELFI001
Daily Secu001
Defesa em Foco001
Der Tagesspiegel001
DiarioBitcoin001
Die Presse001
DigitalToday001
DoNews001
DonanımHaber001
Dutch IT Leaders001
Dân trí001
EBN001
Economedia001
El Debate001
El Mundo001
El Observador001
ElOtroLado.net001
EmarketerZ001
Estadão001
Estrella Digital001
Europa Press001
Everyeye Tech001
Express Computer001
Feuerwehr-Magazin001
Financial News (Korea)001
Financiarul001
Forbes Türkiye001
Fortune001
Fortune Italia001
Frankfurter Allgemeine Zeitung001
Free Press Journal001
GIGAZINE001
GameMeca001
Gazzetta del Sud001
GinjFo001
Global News001
Green Bay Press-Gazette001
Génération NT001
Haber 7001
Haber.com001
Hardware Upgrade001
HardwareCooking001
Harian Jogja001
Help Net Security001
How-To Geek001
Hírstart001
Hürriyet001
ICTjournal001
IDX Channel001
INTERNET Watch (Impress)001
IT Finanzmagazin001
IT Social001
ITWeb001
ITdaily003
ITmedia000
IT之家001
Il Sole 24 Ore001
Inc42001
India TV News001
InfoMoney001
Infobae001
Infopoint Security001
Information Age (ACS)001
Infosecurity Magazine001
IniBalikpapan.Com001
Insider Paper001
J-CAST News000
Jawa Pos001
JeuxVideo.com001
Jornal de Notícias001
Journal du Canada001
Journal du Coin001
Koran Jakarta001
Kyodo News001
L'essentiel001
La Libre Belgique001
Latin Times001
Le Monde Informatique001
Le Temps001
LeBigData.fr001
Les Affaires001
Linternaute001
Lupa.cz002
Mado no Mori (窓の杜)001
Marketing4eCommerce001
Mashable000
Mashable India001
MediaNama001
Milton Keynes Citizen001
Morocco World News001
NBC News000
News9Live001
Người Quan Sát001
Notebookcheck001
Notebookcheck.it001
ORF001
Open Access Government001
PA Media (the Press Association)000
PC Gamer000
PCMag002
Paperjam001
Peterborough Telegraph001
Polinews001
QA Financial001
RTL.de001
RTVE001
Reuters000
SAPO Tek001
Salzburg24001
Sankei Shimbun001
Search Engine Roundtable001
Security Affairs001
Security.NL002
Shinailbo (신아일보)001
SiliconANGLE001
Sina Finance001
Sunderland Echo001
SussexWorld001
TechRadar001
TechTarget002
TechTarget Japan
part of ITmedia
001
Techaeris001
Techzine Global001
The Atlantic000
The Brussels Times000
The DFIR Blog000
The Economic Times001
The Guardian000
The Indian Express001
The Kathmandu Post001
The Mandarin001
The New York Times000
The Next Web001
The Next Web000
The Star001
The Verge001
The Wall Street Journal000
The Washington Post000
The420.in001
Trak.in001
TugaTech001
TuttoTech001
USA Today001
WIRED001
WIRED en Español
part of WIRED
001
Wall-Street.ro001
Wikipedia (English)
part of The Wikimedia Foundation
009
Yahoo001
Yahoo Finance002
Yahoo! News Japan002
ZATAZ001
actainfo001
blue News001
datensicherheit.de001
detikcom002
dpa (Deutsche Presse-Agentur)000
hurbra001
iPhoneSoft001
iTWire001
ijiwei001
it-daily.net001
la Repubblica001
php[architect]001
shattered.io001
teleSUR English001
watson001
Área Cúcuta001
İndigo Dergisi001
データ・マックス001
時事ドットコム001
아이티데일리001
한국경제001
헬로티001

Registry (2)

PartyStatesRelaysSources publishedClaims it states
The CVE Program
part of MITRE
1012ac-high
NIST National Vulnerability Database002

Project (3)

PartyStatesRelaysSources publishedClaims it states
php/php-src
part of The PHP Group / php.net
103
PHPocalypse Tracker001
php2shell.com, the joint microsite of OpenAI, Wiz and Calif001

Platform (6)

PartyStatesRelaysSources publishedClaims it states
X (Twitter)100
GitHub000
Hacker News (news.ycombinator.com)000
nitter.net, an X mirror001
note (note.com)001
voix.jp001

Unnamed (1)

PartyStatesRelaysSources publishedClaims it states
Unnamed sources400cvss-10 fix-incomplete vibe-code

This-site (1)

PartyStatesRelaysSources publishedClaims it states
This site (php.oct.2026.newsroom.sgit.ai)100no-confirmed-compromise

The file is data/entities.json, with who states each row in data/attribution.json. A party with a page of its own links to it.