Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP-Sicherheitslücke und Hacker-Angriffe: Viele Websites wieder online
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261024T083755Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Berliner Morgenpost (German), 22 October: many websites back online; the PHP2Shell vulnerability triggered millions of attack attempts worldwide. Acco...
What it says, as the collector read it
PHP-Sicherheitslücke und Hacker-Angriffe: Viele Websites wieder online
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page de/news/morgenpost/politik-article413475223-weltweite-sicherheitsluecke-zahlrei, snapshot 20261024T083755Z. Copied byte for byte; every file's sha256 is in captures/20261024T083755Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Berliner Morgenpost (German), 22 October: many websites back online; the PHP2Shell vulnerability triggered millions of attack attempts worldwide. According to Cloudflare's chief executive, criminal actors began scanning the worldwide network for unprotected servers immediately after the details became known, and within a few hours access attempts rose exponentially.
> PHP2Shell-Sicherheitslücke löst weltweit Millionen Angriffsversuche aus
_Curator's translation:_ "PHP2Shell vulnerability triggers millions of attack attempts worldwide"
_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Berliner Morgenpost says many sites that went offline are back, while a wave of attacks continues, citing Cloudflare's Matthew Prince. It cites the BSI warning, states, municipalities, universities and hospitals going offline, and Digital Minister Karsten Wildberger seeing no sign that federal sites were affected.
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP-Sicherheitslücke und Hacker-Angriffe: Viele Websites wieder online". Selected mechanically, not read by a person.
Capture notes
Language de. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261024T083755Z · HTTP 200 · https://www.morgenpost.de/politik/article413475223/weltweite-sicherheitsluecke-zahlreiche-webseiten-werden-abgeschaltet.html
headers.json6932a2fce0d33d0deabcbdd76a371593f894435e90175c9458d1bb1f6455b975 711 bytespage.htmlc99b082464f9e8666d2dfd752dc3ad6a50701d99675aab2ab2bb61cd7301229a 365,980 bytesprovenance.json4d524cf800f97e5bb620fc71475d2e28930effa00e6dd9c8c2bc5784c004ed16 1,691 bytestext.txtd74246f0d89bb48b410f6da43dec7b755f8f15b3a3cee7d07858fc4f7592ad9e 10,139 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →