# Source: Discovery of security vulnerabilities in PHP programming language triggers global internet shutdowns - World Socialist Web Site

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

World Socialist Web Site: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Discovery of security vulnerabilities in PHP programming language triggers global internet shutdowns - World Socialist Web Site

**World Socialist Web Site** · [https://www.wsws.org/en/articles/2026/10/23/rfdk-o23.html](https://www.wsws.org/en/articles/2026/10/23/rfdk-o23.html) · published 2026-10-23 · added by `curator@php.newsroom` · slug `wsws-en-articles-2026-10-23-rfdk-o23-html`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261025T070559Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). World Socialist Web Site (English), 23 October: a long explainer, 'Discovery of security vulnerabilities in PHP programming language triggers global i...

## What it says, as the collector read it

#### Discovery of security vulnerabilities in PHP programming language triggers global internet shutdowns - World Socialist Web Site

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `au/news/wsws/en-articles-2026-10-23-rfdk-o23-html`, snapshot `20261025T070559Z`. Copied byte for byte; every file's sha256 is in `captures/20261025T070559Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

World Socialist Web Site (English), 23 October: a long explainer, 'Discovery of security vulnerabilities in PHP programming language triggers global internet shutdowns'. It cites the Wall Street Journal that hackers could exploit the weakness 'in many ways, some requiring just a few seconds', describes the two flaws, says the flaws affected PHP 5.4 through 8.5.11, and lists precautionary shutdowns (Finland's Valtori, France's prefectures, the Netherlands' NCSC site). It says the PHP project released its fixes at about 9:30 a.m. Eastern on Wednesday, that Calif found the defects in an OpenAI-funded examination with GPT-5.6 Sol while Wiz independently reported them with AI systems, and that the flaws were described as having high attack complexity, though AI could compress the interval between patch and public exploit code from days to hours. It quotes Calif's chief executive Thai Duong to the Wall Street Journal. The last part is the outlet's own political commentary on private ownership of digital infrastructure, which carries no claims about the incident.

> Some dude on Twitter could take the patches and run AI against it and post some exploit script. All hell will break loose.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Discovery of security vulnerabilities in PHP programming language triggers global internet shutdowns - World Socialist Web Site". Selected mechanically, not read by a person.

#### Capture notes

Language `en`. The page ends with the outlet's fundraising boilerplate and unrelated headline links (site chrome). Nothing in the article text addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261025T070559Z · HTTP 200 · https://www.wsws.org/en/articles/2026/10/23/rfdk-o23.html- `headers.json` 3b081940c0f4c57e56c20eb549ea8bb79ad4bcff1f182e41494b7b14e973bc66 387 bytes
- `page.html` d5f5870fefb8836c0e5c93dad919f6edbc26b97ff9a54a6e72c79e8386e1aa4f 156,012 bytes
- `provenance.json` d8757d1836e50f22ccbf9781cc3ba4e58d2d994df1931325c18d93722a60d6c5 1,691 bytes
- `rendered.html` 89c2982039d5b93d8a785ccdb257700ac07c21916a940d5a7a3178e2c8597b9c 173,643 bytes
- `screenshot.jpg` 0a5e291ac76696cbb0a7abe415fa2711e76e0ce7745d6fbea7e9dccb4ae628aa 849,081 bytes
- `text.txt` a4e906f7f39fda6f10ef7ee4cb386b489411d630289457ed3aec5ae478033b84 9,837 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.45 · data as of 2026-10-27T09:43Z · vault commit 55b47c4d6af1 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/wsws-en-articles-2026-10-23-rfdk-o23-html/index.html