# Source: "우리 홈페이지도 위험한가요?"…PHP 취약점에 속수무책 중소기업 - 뉴스1

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

뉴스1: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# "우리 홈페이지도 위험한가요?"…PHP 취약점에 속수무책 중소기업 - 뉴스1

**뉴스1** · [https://www.news1.kr/it-science/security-hacking/6330361](https://www.news1.kr/it-science/security-hacking/6330361) · published 2026-10-25 · added by `curator@php.newsroom` · slug `news1-it-science-security-hacking-6330361`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261028T032724Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). A Korean news-agency feature (News1, 25 October) on small businesses unable to tell whether their sites are exposed. It reports that the two PHP flaws...

## What it says, as the collector read it

#### "우리 홈페이지도 위험한가요?"…PHP 취약점에 속수무책 중소기업 - 뉴스1

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `kr/news/news1/it-science-security-hacking-6330361`, snapshot `20261028T032724Z`. Copied byte for byte; every file's sha256 is in `captures/20261028T032724Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A Korean news-agency feature (News1, 25 October) on small businesses unable to tell whether their sites are exposed. It reports that the two PHP flaws were disclosed on 21 October, that the government issued a cyber crisis 'caution' alert on 22 October, and that CYFIRMA said a Korean-speaking group had been discussing target selection and reconnaissance and planned a first target list by 25 October. It reports that PHP 8.1 and older no longer get official fixes, so shops on them must change version, that the hosting companies Cafe24 and Gabia applied patches (Gabia also backported fixes or mitigations to unsupported versions), and quotes two professors calling for public support for small firms. A KISA official says no attack cases had been reported to it and monitoring continues.

> 한국인터넷진흥원(KISA) 관계자는 이번 PHP 보안 취약점과 관련해 접수된 공격 사례는 없다며 모니터링을 지속하고 있다고 밝혔다.

_Curator's translation:_ "A Korea Internet and Security Agency (KISA) official said no attack cases had been reported to it regarding the PHP security vulnerabilities and that it is continuing to monitor."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: ""우리 홈페이지도 위험한가요?"…PHP 취약점에 속수무책 중소기업 - 뉴스1". Selected mechanically, not read by a person.

#### Capture notes

Language `ko`. The page's copyright line forbids reuse for AI training; noted here, not a reason to skip. It also carries a note that one illustration was generated with ChatGPT. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261028T032724Z · HTTP 200 · https://www.news1.kr/it-science/security-hacking/6330361- `headers.json` c48b3f7e30f5e1a0b94b6e9fb47d3ca235d4ae72a5cdf1a5f742763b7deea722 516 bytes
- `page.html` e5b6f4ff7c52ad8cc529247529ce10f61d1640683e6ffba8dae7d98c38b5a800 117,082 bytes
- `provenance.json` 57da818d72966908cb33f715a2f7a467b87dbb5df73765cf65d2c4b83bc73de4 1,660 bytes
- `rendered.html` 992e7f28cf0712f9148fe380dd3e6094e16a841416717dc8f8a6f5cb9e245d38 358,145 bytes
- `screenshot.jpg` f568a850a2580efcaad1a4b991f85dc8b2dfcc1ae187d7115f4faf8436873126 723,568 bytes
- `text.txt` d91380c94c1035a40288aa18730d3729a800cdb08ac195662ed76d34eda9e3c0 15,612 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.51 · data as of 2026-10-28T17:15Z · vault commit 75668aedfb6d · https://refs.php.oct.2026.newsroom.sgit.ai/sources/news1-it-science-security-hacking-6330361/index.html