Celah PHP2Shell Ancam 33 Juta Situs, Serangan Siber Melonjak

Celah PHP2Shell Ancam 33 Juta Situs, Serangan Siber Melonjak

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page id/news/uzone/celah-php2shell-ancam-33-juta-situs-serangan-siber-melonjak, snapshot 20261023T232528Z. Copied byte for byte; every file's sha256 is in captures/20261023T232528Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Uzone.id (Indonesia), 23 October, by Vina Insyani: PHP2Shell 'threatens 33 million sites, cyber attacks surge'. Citing TechCrunch and Malwarebytes, it says the two flaws (9.2 on CVSS) were published on 21 October, that PHP runs about 70% of websites (the number of sites using it, per TechCrunch, exceeds 33 million), and that 'exploitation is already massive, even affecting 32 UK government services that were deactivated, and sites such as the BBC, the Internet Archive, Wikipedia and 4chan'. That sentence runs together precautionary shutdowns and exploitation; other items in the vault describe the 32 UK services as suspended as a precaution (vietnamnet-website-toan-cau-hung-chiu-hang-trieu-do).

> Eksploitasi sudah terjadi secara masif, bahkan memengaruhi 32 layanan pemerintah Inggris yang dinonaktifkan, serta situs seperti BBC, Internet Archive, Wikipedia, dan 4Chan.

_Curator's translation:_ "Exploitation has already happened on a massive scale, even affecting 32 UK government services that were deactivated, and sites such as the BBC, the Internet Archive, Wikipedia and 4chan."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Celah PHP2Shell Ancam 33 Juta Situs, Serangan Siber Melonjak". Selected mechanically, not read by a person.

Capture notes

Language id. Nothing in the page addresses an AI or hides text from a reader.