The disastrous PHP vulnerabilities were exploited days before the patch

Hackers attempted to exploit the PHP flaws impacting sites crossed the web days earlier they were patched, according to a study from Amazon Threat Intelligence. CJ Moses, Amazon main accusation information officer, writes that the company's information squad recovered a PHP2Shell exploit effort connected October 17th done a monitoring strategy designed to bait hackers, arsenic reported earlier by Wired and Bleeping Computer.

On Wednesday, websites scrambled to use a patch for two captious information vulnerabilities affecting PHP, a programming connection utilized by a ample information of the internet, including WordPress sites. The flaws - CVE-2026-109618 and CVE-2026- …

Read the afloat communicative astatine The Verge.