Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
Lỗ hổng bảo mật PHP: AI khiến điều bị lãng quên thành mối đe dọa
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Tia Sáng (Vietnam, Vietnamese), a long feature, 'PHP vulnerability: AI turns what was forgotten into a threat'. It says many European bodies proactive...
What it says, as the collector read it
Lỗ hổng bảo mật PHP: AI khiến điều bị lãng quên thành mối đe dọa
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page vn/news/tiasang/lo-hong-php-ai-khien-dieu-bi-lang-quen-thanh-moi-de-doa-5135, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Tia Sáng (Vietnam, Vietnamese), a long feature, 'PHP vulnerability: AI turns what was forgotten into a threat'. It says many European bodies proactively disconnected or closed sites after information on the two flaws leaked before patches could be applied, quotes Professor Phan Duong Hieu of the Paris Polytechnic's telecom school on the unauthenticated remote control risk, says the flaws were found from August while the PHP team prepared patches quietly, that governments worry hackers could use AI to shorten exploitation, and that an estimated 1.5 million of 2.6 million servers still run unpatched PHP. The explanation of PHP and the AI discussion follow; no new facts beyond the Censys-derived estimate already held.
> Ước tính hiện có khoảng 1,5 triệu trong số 2,6 triệu máy chủ đang sử dụng phiên bản PHP chưa vá lỗi.
_Curator's translation:_ "It is estimated that about 1.5 million of 2.6 million servers are currently using unpatched PHP versions."
_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Tia Sang (Vietnam) feature: European agencies, schools and hospitals went offline. Prof. Phan Duong Hieu explains the risk, and an estimate says about 1.5 million of 2.6 million servers still run unpatched PHP. It highlights that Calif is led by Vietnamese engineer Duong Ngoc Thai and covers the history from Esser in 2004 to OSTIF/Quarkslab in 2024.
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Lỗ hổng bảo mật PHP: AI khiến điều bị lãng quên thành mối đe dọa". Selected mechanically, not read by a person.
Capture notes
Language vi. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T160435Z · HTTP 200 · https://tiasang.com.vn/lo-hong-php-ai-khien-dieu-bi-lang-quen-thanh-moi-de-doa-5135729.html
headers.json2c004ced4fc129b01d96818b80112309dd714140bcfba514f81fc169f5820aa2 1,758 bytespage.html8e9f81344cf949c2dab97abd28f859af5cfab0ae40408140ce0974c3d7fbefcd 194,007 bytesprovenance.json48df29c3fdcff0a5e3fa7c0039ac4c2cfd3b335e02d7b3b941f916c33865dd9b 1,781 bytesrendered.html0b5817e1dc541694be86fd9f478f0e3b11d9a3c7ea890136c3353727b0801088 398,685 bytesscreenshot.jpg4c0d28855af00a794806adbc621d4c40a25a0b4aa22068273078cb6a1de730f4 953,423 bytestext.txt7b279f0fc3928e58f4e3c23f84ea63a0ef75fef70df77dc620888e02dae7e756 22,053 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →