# Source: 360安全云发布PHP2Shell应急防护方案，助力政企网站抢修窗口期-互联网专区

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

IT168 软件·学院: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# 360安全云发布PHP2Shell应急防护方案，助力政企网站抢修窗口期-互联网专区

**IT168 软件·学院** · [https://software.it168.com/a2026/1022/6954/000006954576.shtml](https://software.it168.com/a2026/1022/6954/000006954576.shtml) · published 2026-10-22 16:30 · added by `curator@php.newsroom` · slug `software-it168-a2026-1022-6954-000006954576-shtml`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261024T133450Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). IT168 (China, Chinese), 22 October: a vendor-written piece promoting '360 Security Cloud's' emergency protection plan for PHP2Shell. Its framing parag...

## What it says, as the collector read it

#### 360安全云发布PHP2Shell应急防护方案，助力政企网站抢修窗口期-互联网专区

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `hk/news/software-it168/a2026-1022-6954-000006954576-shtml`, snapshot `20261024T133450Z`. Copied byte for byte; every file's sha256 is in `captures/20261024T133450Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

IT168 (China, Chinese), 22 October: a vendor-written piece promoting '360 Security Cloud's' emergency protection plan for PHP2Shell. Its framing paragraph lists precautionary shutdowns on 21 October: in the Netherlands the Port of Rotterdam, the government portal Overheid.nl, the Dutch football association, the sites of the five national parties and several hospitals, following the national cyber-security centre's approach; in Finland the state IT agency Valtori took public government network services offline; France's interior ministry temporarily closed local-government administrative sites pending the patch; and Australian government sites, including the Signals Directorate's, were affected. It cites W3Techs (about 70.5% of sites with a known server-side language), VirusTotal's estimate of over 5.1 million exposed PHP hosts, and says no confirmed successful intrusion had been publicly reported. Promotional; the product claims are not recorded.

> 据VirusTotal估算，暴露在互联网上的PHP主机超过510万台。

_Curator's translation:_ "VirusTotal estimates there are more than 5.1 million PHP hosts exposed on the internet."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "360安全云发布PHP2Shell应急防护方案，助力政企网站抢修窗口期-互联网专区". Selected mechanically, not read by a person.

#### Capture notes

Language `en`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261024T133450Z · HTTP 200 · https://software.it168.com/a2026/1022/6954/000006954576.shtml- `headers.json` f9958af19896bb4d9ba961c79cd48d084987a9ca7b605c695c4bcee6a9fc8326 416 bytes
- `page.html` 905deb05ec0d944aa03460dadb3939e3cbe8e5be0c22b69ee79f2986cad7ca09 41,653 bytes
- `provenance.json` 9ab87c259d801c52b06b3c65a735583cd68c91a3375ff1d033408e163d8dac4a 1,693 bytes
- `rendered.html` 0bb5ed8f6e033e4aa23ac4bc016b9555658e8ac43ba3de04c3d926173d20715d 43,285 bytes
- `screenshot.jpg` 5841f166e016fa003a0fd8b6fd919aa0003a79f99fdeb4f58c8547e6ab2a3b63 488,655 bytes
- `text.txt` 1f93707d7016fd45cec3347ef6968f2b5e148581818a29743a2b02382b475584 9,113 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/software-it168-a2026-1022-6954-000006954576-shtml/index.html