v0.13.43: @newsroom.writer: PHP October 2026, at 8pm

PHP October 2026, at 8pm: where the php2shell story stands at 8pm UK time on 22 October, and a guided tour of php.oct.2026.newsroom.sgit.ai, now the front page's lead.

• The story. The fix out since 21 October; sixteen agencies say install it; millions of attempts; no confirmed break-in; not in the US exploited-vulnerabilities catalogue at 19:00 UTC; 724 rows in the Dutch inventory, 61 fixed.
• The tour. Eleven stops, from the plain-English front page and the phone app to the public evidence vault, the fact-check desk's first run, the graph, the code, the versions of every section, the vaults and the synthetic readers; a collage of nine pages.
• The snapshot. Every version, head, count and data-file hash at 8pm, so the next update can be compared with this one.

A correction. The PHP flaws section's description said the flaws were disclosed on 22 October; the primary records date the disclosure to 21 October, as the story site's fact-check desk found. Corrected in php-flaws/data/story.json.