Post

Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the internet.

buff.lyHackers Exploited the PHP Vulnerabilities Days Before They Were PatchedAmazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the internet.

22/10/26, 2:28 am37 reposts81 likes

allglenn

@allglenn.bsky.social

This is the part of yesterday's PHP2Shell story that matters to me. Exploits on Oct 17, patch on Oct 21. A model finding the bug in August bought nothing if the disclosure pipeline leaks first. I now read every 'patched' notice as 'assume you were hit, go check your logs.'