Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Source · news · secondary · captured

เว็บไซต์ปิดตัวทั่วโลก หลังพบช่องโหว่ PHP แพลตฟอร์มคริปโทฯ เสี่ยงได้รับผลกระทบ

Siam Blockchain · https://siamblockchain.com/2026/10/22/crypto-exchange-hack-alert-php2shell-risk/ · published 2026-10-22 · added by curator@php.newsroom · slug siamblockchain-2026-10-22-crypto-exchange-hack-alert-ph

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Siam Blockchain (Thai), 22 October: the Thai-language version of the BeInCrypto crypto-exchange warning recorded as nl-beincrypto-crypto-exchange-hack...

What it says, as the collector read it

เว็บไซต์ปิดตัวทั่วโลก หลังพบช่องโหว่ PHP แพลตฟอร์มคริปโทฯ เสี่ยงได้รับผลกระทบ

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page th/news/siamblockchain/2026-10-22-crypto-exchange-hack-alert-php2shell-risk, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Siam Blockchain (Thai), 22 October: the Thai-language version of the BeInCrypto crypto-exchange warning recorded as nl-beincrypto-crypto-exchange-hack-waarschuwing-php2sh (it quotes the same tweet by CZ and the same SlowMist and Wiz Research points, and the same three at-risk categories). Cloudflare confirmed attackers tried to exploit the flaws and many sites worldwide went offline as a precaution. The claim about the absence of confirmed exchange compromises is recorded on the Dutch edition.

> Cloudflare ก็ได้ยืนยันว่ามิจฉาชีพได้พยายามฉวยโอกาสในเหตุการณ์ดังกล่าวเพื่อหาผลประโยชน์

_Curator's translation:_ "Cloudflare has also confirmed that fraudsters have tried to take advantage of the event for gain."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Siam Blockchain: PHP2Shell risks for crypto platforms (payment gateways, small exchanges, DeFi front-ends). Embeds a warning tweet from Binance founder CZ and SlowMist's announcement that its MistEye system scanned crypto-industry PHP assets worldwide. No exchange hack confirmed.

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "เว็บไซต์ปิดตัวทั่วโลก หลังพบช่องโหว่ PHP แพลตฟอร์มคริปโทฯ เสี่ยงได้รับผลกระทบ". Selected mechanically, not read by a person.

Capture notes

Language th. Nothing in the page addresses an AI or hides text from a reader.

Claims that cite it

No claim cites this source yet.

Events that cite it

No timeline event cites this source yet.

The bytes

capture 20261023T160435Z · HTTP 200 · https://siamblockchain.com/2026/10/22/crypto-exchange-hack-alert-php2shell-risk/
  • headers.json 31f91ac37218b8dc49b4cbe807a64523324d208a2888444181b20b6b4a47e817 1,352 bytes
  • page.html 2d41b62d846401706ec807f8e77069982bac1de3f9dc9f77103ac8bd42efe8d7 349,931 bytes
  • provenance.json 1c7e2c5d6bfc29d884e646f38aa3bad5e0cc9d16fe4ad6a3391c5987bd13e504 1,894 bytes
  • rendered.html 85203e18b99bcfd100696439ddc12ce36d24aaa12c030fc658e4df355b158f1b 1,232,406 bytes
  • screenshot.jpg 0961249abb06809241b44b70836aa2e7216fd90ce2260fe8bdf58851e83488aa 607,530 bytes
  • text.txt 4391c5f206bfa1ec7941c5f06cdc062373e68521b4091d2ad0399cac52038be5 17,933 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →