# Source: สหรัฐฯ ยัน แฮกเกอร์เริ่มโจมตีช่องโหว่ PHP หวั่นกระทบทั่วโลก เสี่ยงถูกโจมตี

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

iMoD: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# สหรัฐฯ ยัน แฮกเกอร์เริ่มโจมตีช่องโหว่ PHP หวั่นกระทบทั่วโลก เสี่ยงถูกโจมตี

**iMoD** · [https://www.iphonemod.net/cisa-warns-hackers-exploiting-critical-php-bugs.html](https://www.iphonemod.net/cisa-warns-hackers-exploiting-critical-php-bugs.html) · published 2026-10-28 · added by `curator@php.newsroom` · slug `iphonemod-cisa-warns-hackers-exploiting-critical-p`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261028T122416Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). A Thai consumer-tech site (iPhoneMod, 28 October) reporting that CISA confirmed on 26 October that hackers are exploiting the two critical PHP flaws i...

## What it says, as the collector read it

#### สหรัฐฯ ยัน แฮกเกอร์เริ่มโจมตีช่องโหว่ PHP หวั่นกระทบทั่วโลก เสี่ยงถูกโจมตี

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `th/news/iphonemod/cisa-warns-hackers-exploiting-critical-php-bugs-html`, snapshot `20261028T122416Z`. Copied byte for byte; every file's sha256 is in `captures/20261028T122416Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A Thai consumer-tech site (iPhoneMod, 28 October) reporting that CISA confirmed on 26 October that hackers are exploiting the two critical PHP flaws in the wild and ordered US civilian federal agencies to fix them within three days; it says CISA did not name the attackers. It adds background: the flaws were first noticed about two years earlier, when the PHP Foundation said no practical exploitation was known so no patch was issued, and that Calif researchers later found, with help from an AI model, how to exploit them. It then comments on open-source funding limits and on AI's growing ability to chain vulnerabilities.

> เมื่อวันที่ 26 ต.ค. 2026 CISA ออกประกาศเตือนเกี่ยวกับช่องโหว่ PHP ระดับวิกฤต 2 จุด หลังยืนยันว่ามีการใช้ช่องโหว่ดังกล่าวโจมตีระบบจริง (In-the-wild Exploitation)

_Curator's translation:_ "On 26 Oct 2026 CISA issued a warning about the two critical PHP vulnerabilities after confirming they are being exploited in real attacks (in-the-wild exploitation)."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "สหรัฐฯ ยัน แฮกเกอร์เริ่มโจมตีช่องโหว่ PHP หวั่นกระทบทั่วโลก เสี่ยงถูกโจมตี". Selected mechanically, not read by a person.

#### Capture notes

Language `th`. A consumer-tech site; the page also carries unrelated product headlines. Nothing in it addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261028T122416Z · HTTP 200 · https://www.iphonemod.net/cisa-warns-hackers-exploiting-critical-php-bugs.html- `headers.json` 2f67ebab34db6677071d9a96b923b5d0c9f551a0f421f4beabaa427e4809d788 941 bytes
- `page.html` 8d5ed2a0b926f103dc780d485302c97e62d1e6e066bf47005e51e7176df14449 293,876 bytes
- `provenance.json` aeba620553f2cad229a70f1b8aabe884df2b72f152bd1bb18493a85166703cb4 1,868 bytes
- `rendered.html` b6ae2c1191420021a2544306a96ae8140b102ecb55c7beb5a571e709832f2ce2 668,077 bytes
- `screenshot.jpg` b17d2d1c3cb1cafba22ca90d2231a7872c4e5de0724544bdb326f84cb62732f0 693,215 bytes
- `text.txt` 470b86d1326a731e73c05c34662f82b42ac63643cb83494b5ba1076e59456df9 22,594 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.51 · data as of 2026-10-28T17:15Z · vault commit 75668aedfb6d · https://refs.php.oct.2026.newsroom.sgit.ai/sources/iphonemod-cisa-warns-hackers-exploiting-critical-p/index.html