"우리 홈페이지도 위험한가요?"…PHP 취약점에 속수무책 중소기업 - 뉴스1

"우리 홈페이지도 위험한가요?"…PHP 취약점에 속수무책 중소기업 - 뉴스1

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page kr/news/news1/it-science-security-hacking-6330361, snapshot 20261028T032724Z. Copied byte for byte; every file's sha256 is in captures/20261028T032724Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

A Korean news-agency feature (News1, 25 October) on small businesses unable to tell whether their sites are exposed. It reports that the two PHP flaws were disclosed on 21 October, that the government issued a cyber crisis 'caution' alert on 22 October, and that CYFIRMA said a Korean-speaking group had been discussing target selection and reconnaissance and planned a first target list by 25 October. It reports that PHP 8.1 and older no longer get official fixes, so shops on them must change version, that the hosting companies Cafe24 and Gabia applied patches (Gabia also backported fixes or mitigations to unsupported versions), and quotes two professors calling for public support for small firms. A KISA official says no attack cases had been reported to it and monitoring continues.

> 한국인터넷진흥원(KISA) 관계자는 이번 PHP 보안 취약점과 관련해 접수된 공격 사례는 없다며 모니터링을 지속하고 있다고 밝혔다.

_Curator's translation:_ "A Korea Internet and Security Agency (KISA) official said no attack cases had been reported to it regarding the PHP security vulnerabilities and that it is continuing to monitor."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: ""우리 홈페이지도 위험한가요?"…PHP 취약점에 속수무책 중소기업 - 뉴스1". Selected mechanically, not read by a person.

Capture notes

Language ko. The page's copyright line forbids reuse for AI training; noted here, not a reason to skip. It also carries a note that one illustration was generated with ChatGPT. Nothing in the page addresses an AI or hides text from a reader.