Website toàn cầu hứng chịu hàng triệu nỗ lực tấn công, khai thác lỗ hổng PHP

Website toàn cầu hứng chịu hàng triệu nỗ lực tấn công, khai thác lỗ hổng PHP

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page vn/news/24h/cong-nghe-thong-tin-website-toan-cau-hung-chiu-hang-trieu-no, snapshot 20261031T071303Z. Copied byte for byte; every file's sha256 is in captures/20261031T071303Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

A Vietnamese tech-news item (24h.com.vn, rewriting a VietNamNet report) that millions of attempts to exploit the PHP flaws have been seen worldwide, forcing governments and firms to disconnect services to update. It relays the NSA's warning, the UK minister's statement that 32 public services were suspended as a precaution and the Prime Minister's office saying no critical service was affected or breached, that the UK NCSC sent 50,000 technical alerts and called the scale 'unprecedented' with some old systems needing replacement, Korea's emergency response, China's industry ministry's call to check systems, upgrade to the latest safe PHP, strengthen traffic monitoring and change all passwords and keys, Japan's prime minister's call to update quickly or proactively suspend sites that cannot be fixed, and alerts by Vietnam's authorities. It quotes a former NCSC chief calling it the most serious flaw in five years, Calif's researcher saying deep exploitation had not yet spread widely, Cloudflare's chief executive on tens of thousands of attempts in the first 45 minutes, and Amazon's confirmation of broad probing including before the patch.

> Hàng triệu nỗ lực khai thác lỗ hổng PHP đã diễn ra trên toàn cầu, buộc chính phủ nhiều nước và doanh nghiệp phải tạm ngắt kết nối dịch vụ trực tuyến để cập nhật bản sửa lỗi.

_Curator's translation:_ "Millions of attempts to exploit the PHP flaws have taken place worldwide, forcing the governments and businesses of many countries to temporarily disconnect online services to update the fix."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Website toàn cầu hứng chịu hàng triệu nỗ lực tấn công, khai thác lỗ hổng PHP". Selected mechanically, not read by a person.

Capture notes

Language vi. The capture shows no publication date; the page credits a VietNamNet article as its source. The sidebar lists unrelated headlines, among them an alleged exchange hack that this item does not tie to PHP2Shell and which is not recorded. Nothing in the page addresses an AI or hides text from a reader.