Cybersécurité : une faille de sécurité PHP peut affecter des millions de sites web

Cybersécurité : une faille de sécurité PHP peut affecter des millions de sites web

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page fr/news/epochtimes/cybersecurite-une-faille-de-securite-php-peut-affecter-des-m, snapshot 20261028T144312Z. Copied byte for byte; every file's sha256 is in captures/20261028T144312Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

A French-language news piece (Epoch Times France, 23 October) on US agencies' alerts about the PHP flaws. It reports that the NSA said on 21 October that organisations using PHP must update immediately and, if they cannot, should consider taking affected systems offline; that CISA issued an advisory the same day saying it had not seen exploitation at the time of publication; that Shopify's chief executive called it 'the craziest day in cybersecurity in a long time' as millions of exploitation attempts were already detected; that Huntress warned details had been disclosed before the coordinated release and attacks reported; that the UK NCSC urged preparing to update at once and a UK minister told the Lords on 22 October that 32 government services were unreachable and four partly so; that Dutch bodies (including the port of Rotterdam, government portals, parties and hospitals), Finland's state IT provider and French interior-ministry sites were taken offline; and Cloudflare's chief executive's account of exploitation attempts rising from thousands to millions.

> Bien que la CISA n’ait pas constaté d’exploitation de ces vulnérabilités au moment de la publication, elles représentent un risque pour les organisations si elles ne sont pas corrigées

_Curator's translation:_ "Although CISA had not seen exploitation of these vulnerabilities at the time of publication, they pose a risk to organisations if they are not fixed."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Cybersécurité : une faille de sécurité PHP peut affecter des millions de sites web". Selected mechanically, not read by a person.

Capture notes

Language fr. A wire-style roundup with attributed statements; the NCSC's description of the memory-corruption mechanism is not copied. Nothing in the page addresses an AI or hides text from a reader.