PHP보안 세계비상? 놀라지마. 심장출혈 시즌2니까!

[하트블리드 버그, 어찌 대처하오리까]
https://www.bloter.net/news/articleView.html?idxno=18604

[Wiz Research — PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet]
https://www.wiz.io/blog/php2shell-php-rce

[watchTowr — PHP2Shell FAQ (CVE-2026-109618 & CVE-2026-109619)]
https://watchtowr.com/intelligence/php-cve-2026-109618-faq/

[The Hacker News — PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge]
https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html

[Huntress — Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)]
https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities

[CISA — Critical Vulnerabilities in PHP Require Immediate Patching]
https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-php-require-immediate-patching

[Google Cloud — Responding to core PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619]
https://cloud.google.com/blog/products/identity-security/responding-to-core-php-vulnerabilities-cve-2026-109618-cve-2026-109619

[PHP 8.5.12 릴리스 노트 (GitHub)]
https://github.com/php/php-src/releases/tag/php-8.5.12

[PHP 8.4.27 릴리스 노트 (GitHub)]
https://github.com/php/php-src/releases/tag/php-8.4.27

[PHP Foundation — Today's PHP security release and how we're strengthening PHP security]
https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/

[Calif.io — PHP2Shell 원문 공개 및 발견 과정]
https://calif.io/php2shell/

[OpenAI — Coordinated disclosure of critical vulnerabilities]
https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities

[GitHub Security Advisory — CVE-2026-109618 (GHSA-w8hw-w9fx-j79w)]
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w

[GitHub Security Advisory — CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp)]
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp

[NVD — CVE-2026-109618]
https://nvd.nist.gov/vuln/detail/CVE-2026-109618

[NVD — CVE-2026-109619]
https://nvd.nist.gov/vuln/detail/CVE-2026-109619

[Codeable — PHP Security Release on 21 October 2026: What WordPress Site Owners Need to Do]
https://www.codeable.io/blog/php-vulnerability-cve-2026-109618/

[SiteGround — Critical PHP vulnerabilities: SiteGround sites protected]
https://www.siteground.com/blog/critical-php-vulnerabilities-october-2026

[Qualys — Two Critical PHP Flaws (PHP2Shell): Find, Mitigate, and Patch]
https://blog.qualys.com/vulnerabilities-threat-research/2026/10/20/php-announces-critical-security-release-for-two-vulnerabilities

[Sevalla — Protect PHP applications from CVE-2026-109618 and CVE-2026-109619]
https://docs.sevalla.com/security/advisories/php-cve-2026-109618.md

[UK NCSC — Critical security issue affecting PHP]
https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php

[xkcd 1354 — Heartbleed Explanation (설명 방식 참고)]
https://xkcd.com/1354/