Discovery of security vulnerabilities in PHP programming language triggers global internet shutdowns - World Socialist Web Site

Discovery of security vulnerabilities in PHP programming language triggers global internet shutdowns - World Socialist Web Site

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page au/news/wsws/en-articles-2026-10-23-rfdk-o23-html, snapshot 20261025T070559Z. Copied byte for byte; every file's sha256 is in captures/20261025T070559Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

World Socialist Web Site (English), 23 October: a long explainer, 'Discovery of security vulnerabilities in PHP programming language triggers global internet shutdowns'. It cites the Wall Street Journal that hackers could exploit the weakness 'in many ways, some requiring just a few seconds', describes the two flaws, says the flaws affected PHP 5.4 through 8.5.11, and lists precautionary shutdowns (Finland's Valtori, France's prefectures, the Netherlands' NCSC site). It says the PHP project released its fixes at about 9:30 a.m. Eastern on Wednesday, that Calif found the defects in an OpenAI-funded examination with GPT-5.6 Sol while Wiz independently reported them with AI systems, and that the flaws were described as having high attack complexity, though AI could compress the interval between patch and public exploit code from days to hours. It quotes Calif's chief executive Thai Duong to the Wall Street Journal. The last part is the outlet's own political commentary on private ownership of digital infrastructure, which carries no claims about the incident.

> Some dude on Twitter could take the patches and run AI against it and post some exploit script. All hell will break loose.

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Discovery of security vulnerabilities in PHP programming language triggers global internet shutdowns - World Socialist Web Site". Selected mechanically, not read by a person.

Capture notes

Language en. The page ends with the outlet's fundraising boilerplate and unrelated headline links (site chrome). Nothing in the article text addresses an AI or hides text from a reader.