PHP 취약점에 세계 비상…웹 인프라의 보안 공백 드러나 < 사회 < 종합 < 기사본문 - 한국사회복지저널

PHP 취약점에 세계 비상…웹 인프라의 보안 공백 드러나 < 사회 < 종합 < 기사본문 - 한국사회복지저널

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page kr/news/ksw-news/news-articleview-html, snapshot 20261029T094207Z. Copied byte for byte; every file's sha256 is in captures/20261029T094207Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

A long Korean welfare-sector news explainer (Korea Social Welfare Journal, 22 October) on the world's response to the PHP flaws. It gives W3Techs' figure of about 75% of sites with a known language using PHP, relays Wiz and Calif on AI-assisted discovery and the leak of details on 20 October and Chainguard's early images, and reports that Amazon's chief information security officer said a honeypot detected a sophisticated attempt on 17 October, four days before the announcement, while WatchTowr's threat-intelligence head had confirmed no successes, the outlet noting the two assessments differed. It relays that the NSA advised preparing to update, the FBI asked that sites be taken offline if they cannot be updated at once, and the White House said it was tracking and coordinating; Dutch, French and other European government site outages; AhnLab TIP's count of 112,183 vulnerable Korean servers (sixth worldwide) and Censys's 1.5 million of 2.6 million unpatched; the Korean government's alert raised to 'caution' at noon on 22 October and its notices to tens of thousands of companies; and KISA's detailed guidance, including restarting services after updating and investigating for planted web shells.

> 패치는 이후 공격을 막는 조치일 뿐 이미 심어진 웹셸을 제거하지는 않는다.

_Curator's translation:_ "A patch is only a measure against later attacks; it does not remove a web shell that has already been planted."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP 취약점에 세계 비상…웹 인프라의 보안 공백 드러나 < 사회 < 종합 < 기사본문 - 한국사회복지저널". Selected mechanically, not read by a person.

Capture notes

Language ko. A long secondhand roundup. It describes how the flaws work and temporary configuration mitigations; none of that is copied here. Nothing in the page addresses an AI or hides text from a reader.