# Source: Lỗ hổng bảo mật PHP: AI khiến điều bị lãng quên thành mối đe dọa

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Tia Sáng: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Lỗ hổng bảo mật PHP: AI khiến điều bị lãng quên thành mối đe dọa

**Tia Sáng** · [https://tiasang.com.vn/lo-hong-php-ai-khien-dieu-bi-lang-quen-thanh-moi-de-doa-5135729.html](https://tiasang.com.vn/lo-hong-php-ai-khien-dieu-bi-lang-quen-thanh-moi-de-doa-5135729.html) · published not stated in the capture · added by `curator@php.newsroom` · slug `tiasang-lo-hong-php-ai-khien-dieu-bi-lang-quen-t`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Tia Sáng (Vietnam, Vietnamese), a long feature, 'PHP vulnerability: AI turns what was forgotten into a threat'. It says many European bodies proactive...

## What it says, as the collector read it

#### Lỗ hổng bảo mật PHP: AI khiến điều bị lãng quên thành mối đe dọa

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `vn/news/tiasang/lo-hong-php-ai-khien-dieu-bi-lang-quen-thanh-moi-de-doa-5135`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Tia Sáng (Vietnam, Vietnamese), a long feature, 'PHP vulnerability: AI turns what was forgotten into a threat'. It says many European bodies proactively disconnected or closed sites after information on the two flaws leaked before patches could be applied, quotes Professor Phan Duong Hieu of the Paris Polytechnic's telecom school on the unauthenticated remote control risk, says the flaws were found from August while the PHP team prepared patches quietly, that governments worry hackers could use AI to shorten exploitation, and that an estimated 1.5 million of 2.6 million servers still run unpatched PHP. The explanation of PHP and the AI discussion follow; no new facts beyond the Censys-derived estimate already held.

> Ước tính hiện có khoảng 1,5 triệu trong số 2,6 triệu máy chủ đang sử dụng phiên bản PHP chưa vá lỗi.

_Curator's translation:_ "It is estimated that about 1.5 million of 2.6 million servers are currently using unpatched PHP versions."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Tia Sang (Vietnam) feature: European agencies, schools and hospitals went offline. Prof. Phan Duong Hieu explains the risk, and an estimate says about 1.5 million of 2.6 million servers still run unpatched PHP. It highlights that Calif is led by Vietnamese engineer Duong Ngoc Thai and covers the history from Esser in 2004 to OSTIF/Quarkslab in 2024.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Lỗ hổng bảo mật PHP: AI khiến điều bị lãng quên thành mối đe dọa". Selected mechanically, not read by a person.

#### Capture notes

Language `vi`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://tiasang.com.vn/lo-hong-php-ai-khien-dieu-bi-lang-quen-thanh-moi-de-doa-5135729.html- `headers.json` 2c004ced4fc129b01d96818b80112309dd714140bcfba514f81fc169f5820aa2 1,758 bytes
- `page.html` 8e9f81344cf949c2dab97abd28f859af5cfab0ae40408140ce0974c3d7fbefcd 194,007 bytes
- `provenance.json` 48df29c3fdcff0a5e3fa7c0039ac4c2cfd3b335e02d7b3b941f916c33865dd9b 1,781 bytes
- `rendered.html` 0b5817e1dc541694be86fd9f478f0e3b11d9a3c7ea890136c3353727b0801088 398,685 bytes
- `screenshot.jpg` 4c0d28855af00a794806adbc621d4c40a25a0b4aa22068273078cb6a1de730f4 953,423 bytes
- `text.txt` 7b279f0fc3928e58f4e3c23f84ea63a0ef75fef70df77dc620888e02dae7e756 22,053 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/tiasang-lo-hong-php-ai-khien-dieu-bi-lang-quen-t/index.html