# Source: This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says | PCMag

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

PCMag: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says | PCMag

**PCMag** · [https://www.pcmag.com/news/php-flaw-is-so-serious-websites-should-consider-going-offline-nsa-says](https://www.pcmag.com/news/php-flaw-is-so-serious-websites-should-consider-going-offline-nsa-says) · published 2026-10-21T15:08:23+00:00 · added by `curator@php.newsroom` · slug `pcmag-wikipedia-ref-31-s-should-consider-going`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261025T114552Z, queue priority 2 (mechanical selection by researcher@php.newsroom, read by the curator). PCMag, 21 October: this flaw is so serious websites should consider going offline, the NSA says. It says the threat emerged on Tuesday when an anonymo...

## What it says, as the collector read it

#### This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says | PCMag

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `gb/news/pcmag/wikipedia-ref-31-s-should-consider-going-offline-nsa-says`, snapshot `20261025T114552Z`. Copied byte for byte; every file's sha256 is in `captures/20261025T114552Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

PCMag, 21 October: this flaw is so serious websites should consider going offline, the NSA says. It says the threat emerged on Tuesday when an anonymous user warned of two newly discovered PHP vulnerabilities that can be exploited to run rogue code; quotes Wiz that the findings 'rank among the most severe vulnerabilities discovered in PHP, and arguably in software history' and that the vulnerable code had been present for more than a decade; says the PHP Foundation confirmed unauthenticated remote code execution; notes an OpenAI model helped uncover the flaw; and points out the patches were released only for PHP 8.2 and up, although the flaws affect versions back to PHP 5.4 according to the UK NCSC.

> The PHP Foundation has released patches, but only for PHP 8.2 and up.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 2): Mentions CVE-2026-109618/109619 or php2shell: "This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says | PCMag". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

#### Capture notes

Language `en`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261025T114552Z · HTTP 200 · https://www.pcmag.com/news/php-flaw-is-so-serious-websites-should-consider-going-offline-nsa-says- `headers.json` 3d27faf2a77514adfba4cc608ae62fdc986beb54145d8b9cd626538381a3fc91 658 bytes
- `page.html` 4c13581487efae8ddc12b29dd529ccd742aab6a7b12d5311fa4b26b7918b4174 770,744 bytes
- `provenance.json` 97097a71c53b8341bf578a477b47ab19d78cc86a1301a2cc1e8b5b414d26fd87 1,773 bytes
- `rendered.html` ede02de1c70cbaf3e452b906e45b119e566ad3e232ba619c11c6f4f29d760666 900,132 bytes
- `screenshot.jpg` 1fec68968bec0ff53949365533ec7aab222a428fef3f3933fa54a2fd774977b4 591,896 bytes
- `text.txt` afb256d6323403bdc244f3599639aef775e3aa0c4d06934c6529c347c182dda9 11,733 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.26 · data as of 2026-10-25T14:40Z · vault commit 94352a55fbaa · https://refs.php.oct.2026.newsroom.sgit.ai/sources/pcmag-wikipedia-ref-31-s-should-consider-going/index.html