Hackers Expluted PHP Vulnerabilities Days Before Public Fixes Released
· Technology · Wired, CBS News
Amazon Web Services researchers discovered that at least one threat actor began attempting to exploit critical PHP vulnerabilities on October 17, four days before official patches were released to the public. The flaws, known collectively as PHP2Shell, targeted web servers and honeypots using IP addresses linked to commercial anonymization networks. Proof-of-concept exploits began emerging on Wednesday just hours before the vulnerability disclosure at 10 am ET, leading to a mad scramble by administrators to secure applications. AWS reported multiple exploitation attempts from various providers with different attack goals in the hours leading up to the disclosure. The PHP Foundation did not respond to requests for comment regarding the early exploits.
Why it matters
Early exploitation of unpatched software vulnerabilities exposes systemic risks in web infrastructure and demonstrates how quickly threat actors weaponize bugs before developers can issue fixes.
Read the original report — Wired
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.