Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Source · news · secondary · captured

360安全云发布PHP2Shell应急防护方案,助力政企网站抢修窗口期-互联网专区

IT168 软件·学院 · https://software.it168.com/a2026/1022/6954/000006954576.shtml · published 2026-10-22 16:30 · added by curator@php.newsroom · slug software-it168-a2026-1022-6954-000006954576-shtml

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261024T133450Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). IT168 (China, Chinese), 22 October: a vendor-written piece promoting '360 Security Cloud's' emergency protection plan for PHP2Shell. Its framing parag...

What it says, as the collector read it

360安全云发布PHP2Shell应急防护方案,助力政企网站抢修窗口期-互联网专区

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page hk/news/software-it168/a2026-1022-6954-000006954576-shtml, snapshot 20261024T133450Z. Copied byte for byte; every file's sha256 is in captures/20261024T133450Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

IT168 (China, Chinese), 22 October: a vendor-written piece promoting '360 Security Cloud's' emergency protection plan for PHP2Shell. Its framing paragraph lists precautionary shutdowns on 21 October: in the Netherlands the Port of Rotterdam, the government portal Overheid.nl, the Dutch football association, the sites of the five national parties and several hospitals, following the national cyber-security centre's approach; in Finland the state IT agency Valtori took public government network services offline; France's interior ministry temporarily closed local-government administrative sites pending the patch; and Australian government sites, including the Signals Directorate's, were affected. It cites W3Techs (about 70.5% of sites with a known server-side language), VirusTotal's estimate of over 5.1 million exposed PHP hosts, and says no confirmed successful intrusion had been publicly reported. Promotional; the product claims are not recorded.

> 据VirusTotal估算,暴露在互联网上的PHP主机超过510万台。

_Curator's translation:_ "VirusTotal estimates there are more than 5.1 million PHP hosts exposed on the internet."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "360安全云发布PHP2Shell应急防护方案,助力政企网站抢修窗口期-互联网专区". Selected mechanically, not read by a person.

Capture notes

Language en. Nothing in the page addresses an AI or hides text from a reader.

Claims that cite it

No claim cites this source yet.

Events that cite it

No timeline event cites this source yet.

The bytes

capture 20261024T133450Z · HTTP 200 · https://software.it168.com/a2026/1022/6954/000006954576.shtml
  • headers.json f9958af19896bb4d9ba961c79cd48d084987a9ca7b605c695c4bcee6a9fc8326 416 bytes
  • page.html 905deb05ec0d944aa03460dadb3939e3cbe8e5be0c22b69ee79f2986cad7ca09 41,653 bytes
  • provenance.json 9ab87c259d801c52b06b3c65a735583cd68c91a3375ff1d033408e163d8dac4a 1,693 bytes
  • rendered.html 0bb5ed8f6e033e4aa23ac4bc016b9555658e8ac43ba3de04c3d926173d20715d 43,285 bytes
  • screenshot.jpg 5841f166e016fa003a0fd8b6fd919aa0003a79f99fdeb4f58c8547e6ab2a3b63 488,655 bytes
  • text.txt 1f93707d7016fd45cec3347ef6968f2b5e148581818a29743a2b02382b475584 9,113 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →