# Source: PHP-Sicherheitslücke auf Websites: Was Sie jetzt tun müssen, um sich abzusichern - DER SPIEGEL

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Spiegel: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP-Sicherheitslücke auf Websites: Was Sie jetzt tun müssen, um sich abzusichern - DER SPIEGEL

**Spiegel** · [https://www.spiegel.de/netzwelt/php-sicherheitsluecke-auf-websites-was-sie-jetzt-tun-muessen-um-sich-abzusichern-a-625f6457-1437-4643-8fd1-b0624da87910](https://www.spiegel.de/netzwelt/php-sicherheitsluecke-auf-websites-was-sie-jetzt-tun-muessen-um-sich-abzusichern-a-625f6457-1437-4643-8fd1-b0624da87910) · published 2026-10-22 · added by `curator@php.newsroom` · slug `spiegel-netzwelt-php-sicherheitsluecke-auf-websi`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261028T144312Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). A German news-magazine guide (Der Spiegel, 22 October) headlined 'PHP security hole on websites: what you must do now to protect yourself', behind the...

## What it says, as the collector read it

#### PHP-Sicherheitslücke auf Websites: Was Sie jetzt tun müssen, um sich abzusichern - DER SPIEGEL

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `de/news/spiegel/netzwelt-php-sicherheitsluecke-auf-websites-was-sie-jetzt-tu`, snapshot `20261028T144312Z`. Copied byte for byte; every file's sha256 is in `captures/20261028T144312Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A German news-magazine guide (Der Spiegel, 22 October) headlined 'PHP security hole on websites: what you must do now to protect yourself', behind the magazine's paywall: only the standfirst and a teaser are captured. The standfirst says a deep security flaw endangers millions of servers on the internet and that, for users, the main thing is to be vigilant; the teaser says behind the scenes IT experts and attackers are racing over the critical flaw and that private people should also check their home servers, routers and surveillance cameras.

> Eine tiefgreifende Sicherheitslücke gefährdet Millionen Server im Internet. Für Nutzer gilt vor allem: wachsam sein.

_Curator's translation:_ "A deep security flaw endangers millions of servers on the internet. For users the main thing is: be vigilant."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP-Sicherheitslücke auf Websites: Was Sie jetzt tun müssen, um sich abzusichern - DER SPIEGEL". Selected mechanically, not read by a person.

#### Capture notes

Language `de`. Behind a paywall: only the standfirst and a teaser are readable, so this source supports one claim; the rest of the page is unrelated headlines and subscription prompts. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261028T144312Z · HTTP 200 · https://www.spiegel.de/netzwelt/php-sicherheitsluecke-auf-websites-was-sie-jetzt-tun-muessen-um-sich-abzusichern-a-625f6457-1437-4643-8fd1-b0624da87910- `headers.json` 9a139cd53fe4550910c96d8bce01a0aa3defd7161618e06aa86bd2a3d8ac4bd2 784 bytes
- `page.html` 93b51800814cb6fc8f5a29b4be20b9139dbe4c2d7c59bfbf15831e8c23a0b29e 580,250 bytes
- `provenance.json` 29f228a3d97073e0a138b7e112c3cfc7f40d74964ab9dc8bf358ab25409404b3 1,919 bytes
- `rendered.html` 9cc53f3d5421a203fafeb16106f2233bed5ba196ff92571ad0a9ada4cd46a961 1,357,180 bytes
- `screenshot.jpg` ca9ea1f059788860c2269b26c9f09b60a95ae3257e793a11d7f28186e928a926 600,726 bytes
- `text.txt` 341b4aba67dafd6a8c75d080c63beabb37842d5c2d2e4004aa4d4358cc0854c3 9,623 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.51 · data as of 2026-10-28T17:15Z · vault commit 75668aedfb6d · https://refs.php.oct.2026.newsroom.sgit.ai/sources/spiegel-netzwelt-php-sicherheitsluecke-auf-websi/index.html