Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH024

LH024 daily search, 28 October 2026: ranked results as returned

The thirteen frozen queries were sent together at about 06:43 UTC, one each, standard mode, no retry. "..." abbreviates a URL written in full in the 23 October log or later logs. [own domain] marks results on the entry's own domain. New third-party pages since 27 October: en.spaziocrypto.com, stackharbor.com, socprime.com ?p=55063 and ?p=55055, blog.ogwilliam.com tag pages, appwrite.io/threads/1562731450246107207.

  1. php: computingforgeeks.com/?p=176644; it-connect.fr/php-failles-...; computingforgeeks.com/php2shell-cve-2026-109618-check-patch/; levelup.gitconnected.com/php2shell-...; letsdatascience.com/news/openai-model-helps-...; fastly.com/jp/blog/critical-rce-...; cyber.gc.ca/en/alerts-advisories/al26-026-...; magecomp.com/blog/two-critical-php-security-vulnerabilities/; techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-.... No php.net result.
  2. ncsc_uk: digitalpolicyalert.org/change/22109-...; cyber.gc.ca/en/alerts-advisories/al26-026-...; digitalpolicyalert.org/event/44881-...; cyber.gc.ca/fr/alertes-avis/al26-026-...; bg.linkedin.com/in/emil-georgiev-453b8a1b7; levelup.gitconnected.com/php2shell-...; bitsight.com/blog/critical-vulnerability-alert-...; techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; socprime.com/?p=55059. No ncsc.gov.uk result.
  3. cisa: fastly.com/jp/blog/critical-rce-...; letsdatascience.com/news/openai-model-helps-...; en.spaziocrypto.com/security/php-critical-vulnerabilities-cve-2026-109618-cve-2026-109619-patch/; socprime.com/?p=55069; cyber.gc.ca/en/alerts-advisories/al26-026-...; socprime.com/?p=55063; techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; levelup.gitconnected.com/php2shell-...; socprime.com/?p=55059. No cisa.gov result.
  4. cert_eu: techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; secrss.com/articles/94899; lovguiden.dk/en/det-offentlige/cert-eu-cybersikkerhedstjeneste/2026-10-20-...; pentest-tools.com/network-vulnerability-scanning/php2shell-scanner; fastly.com/es-latam/blog/critical-rce-...; lovguiden.dk/en/det-offentlige/eu-agenturet-for-cybersikkerhed/2026-10-21-...; socprime.com/?p=55061; fastly.com/jp/blog/critical-rce-...; socprime.com/?p=55055. No cert.europa.eu result.
  5. cloudflare: fastly.com/jp/blog/critical-rce-...; levelup.gitconnected.com/php2shell-...; letsdatascience.com/news/openai-model-helps-...; bg.linkedin.com/in/emil-georgiev-453b8a1b7; fastly.com/it/blog/critical-rce-...; techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; fastly.com/es-latam/blog/critical-rce-...; stackharbor.com/en/blog/php2shell-cve-2026-109618-109619-what-we-know/; en.spaziocrypto.com/security/php-critical-vulnerabilities-.... No cloudflare.com result.
  6. fastly: [own domain] fastly.com/es-latam, English, jp, it, de, fr and es copies of "critical-rce-vulnerabilities-discovered-core-php-..."; [own domain] fastly.com/documentation/reference/changes/2026/10/added-virtual-patch-...; [own domain] fastly.com/jp/blog/fastlys-proactive-protection-.... All already selected or copies of selected pages.
  7. akamai: [own domain] akamai.com/blog/security-research/critical-remote-code-execution-vulnerabilities-php-core (already selected); pulsetic.com/status/linode/incidents/151561/; letsdatascience.com/news/openai-model-helps-...; levelup.gitconnected.com/php2shell-...; fastly.com/jp/blog/critical-rce-...; bg.linkedin.com/in/emil-georgiev-453b8a1b7; techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; socprime.com/?p=55061; fastly.com/blog/critical-rce-....
  8. aws: [own domain] aws.amazon.com/security/security-bulletins/2026-143-aws/ (already selected); aiweekly.co/alerts/aws-attackers-exploited-...; magecomp.com/blog/two-critical-php-security-vulnerabilities/; levelup.gitconnected.com/php2shell-...; letsdatascience.com/news/openai-model-helps-...; fastly.com/jp/blog/critical-rce-...; techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; cyber.gc.ca/en/alerts-advisories/al26-026-...; fieldeffect.com/blog/php-updates-critical-rce-flaws.
  9. google_cloud: wiz.io/fr-fr/vulnerability-database/cve/cve-2026-109619; wiz.io/fr-fr/vulnerability-database/cve/cve-2026-109618; [own domain] docs.cloud.google.com/support/bulletins?authuser=26 (the selected bulletins page with a query parameter); windowsreport.com/google-cloud-warns-of-critical-php-vulnerabilities-...; windowsreport.com/google-cloud-warns-of-critical-php-flaws-...; windowsreport.com/?p=1513035; blog.ogwilliam.com/tags/cve-2026-109619; blog.ogwilliam.com/tags/cve-2026-109618; blog.ogwilliam.com/tags/php2shell; blog.ogwilliam.com/tags/php%20rce. The tool's summary names a Google Cloud bulletin "GCP-2026-072 (published October 24, 2026)" on the two CVEs; that is the tool's reading of the selected bulletins page, a lead only, checked below against today's retained copy.
  10. azure: techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; levelup.gitconnected.com/php2shell-...; bg.linkedin.com/in/emil-georgiev-453b8a1b7; letsdatascience.com/news/openai-model-helps-...; cyber.gc.ca/en/alerts-advisories/al26-026-...; avepoint.com/company/security-notice-...; fieldeffect.com/blog/php-updates-critical-rce-flaws; appwrite.io/threads/1562731450246107207; socprime.com/?p=55067. No azure.microsoft.com result.
  11. register: levelup.gitconnected.com/php2shell-...; letsdatascience.com/news/openai-model-helps-...; bitsight.com/blog/critical-vulnerability-alert-...; aha.org/h-isac-white-reports/2026-10-21-...; techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619.md (and its ?lg=en&pdf=download and ?lg=en&pdf=print copies); fieldeffect.com/blog/php-updates-critical-rce-flaws. No theregister.com result.
  12. bleepingcomputer: [own domain] the 20 October article and its /amp/ copy (both already selected); vulmon.com/vulnerabilitydetails?qid=CVE-2026-115560; levelup.gitconnected.com/php2shell-...; socprime.com/?p=55067; cyber.gc.ca/fr/alertes-avis/al26-026-...; techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; bitsight.com/blog/critical-vulnerability-alert-...; letsdatascience.com/news/openai-model-helps-.... The "php-ships-emergency-patches-..." article stays selected (carried).
  13. ars: techcareer.net/en/blog/php-de-kritik-guvenlik-alarmi-...; bg.linkedin.com/in/emil-georgiev-453b8a1b7; levelup.gitconnected.com/php2shell-...; cyber.gc.ca/en/alerts-advisories/al26-026-...; letsdatascience.com/news/openai-model-helps-...; bitsight.com/blog/critical-vulnerability-alert-...; cyber.gc.ca/fr/alertes-avis/al26-026-...; it-connect.fr/php-failles-...; kucoin.com/news/flash/php-discloses-.... No arstechnica.com result.

No own-domain URL outside the current selection: the selection equals 27 October's.

From studies/LH024/data/search-2026-10-28.md in the repository, last changed 28 October 2026.