This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says | PCMag

This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says | PCMag

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page gb/news/pcmag/wikipedia-ref-31-s-should-consider-going-offline-nsa-says, snapshot 20261025T114552Z. Copied byte for byte; every file's sha256 is in captures/20261025T114552Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

PCMag, 21 October: this flaw is so serious websites should consider going offline, the NSA says. It says the threat emerged on Tuesday when an anonymous user warned of two newly discovered PHP vulnerabilities that can be exploited to run rogue code; quotes Wiz that the findings 'rank among the most severe vulnerabilities discovered in PHP, and arguably in software history' and that the vulnerable code had been present for more than a decade; says the PHP Foundation confirmed unauthenticated remote code execution; notes an OpenAI model helped uncover the flaw; and points out the patches were released only for PHP 8.2 and up, although the flaws affect versions back to PHP 5.4 according to the UK NCSC.

> The PHP Foundation has released patches, but only for PHP 8.2 and up.

Why it is here

From the promotion queue (index/promote.json, priority 2): Mentions CVE-2026-109618/109619 or php2shell: "This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says | PCMag". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

Capture notes

Language en. Nothing in the page addresses an AI or hides text from a reader.