Lily Hay Newman / Wired : AWS analysts claim that at least one actor started to exploit the PHP2Shell bugs on October 17, four days prior to the vulnerabilities' public disclosure — Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the internet.
AWS analysts claim that at least one actor started to exploit the PHP2Shell bugs on October 17, four days prior to the vulnerabilities' public disclosure (Lily Hay Newman/Wired)
In short
AWS analysts have discovered that at least one actor began exploiting PHP2Shell bugs on October 17, four days before the vulnerabilities were publicly disclosed. This exploitation has been detected by AWS, highlighting a potential threat to internet security.
Key points
- The exploitation of PHP2Shell bugs has been detected by AWS.: The exploitation of PHP2Shell bugs has been detected by AWS.
- This exploitation has been identified as occurring on October 17, four days prior to the…: This exploitation has been identified as occurring on October 17, four days prior to the public disclosure.
- The exploitation has been "broadly exploited" across the internet.: The exploitation has been "broadly exploited" across the internet.