News
cybersecurity ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More - The Hacker News cybersecurity Arista patches new VeloCloud Orchestrator zero-day exploited in attacks - BleepingComputer cybersecurity Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes - The Hacker News threat-intel Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year - GBHackers cybersecurity PHP2Shell: 24 hours in, 99.3% of Measurable PHP Instances Are Still Unpatched - OX Security cybersecurity Hackers got a four-day head start on epic PHP2Shell vulnerability - Ars Technica Security cybersecurity Node.js Brotli Decoder Out-of-Bounds Write (RCE) – CVE-2026-111497 - OX Security cybersecurity Hacker Conversations: Corey Thuen and the Evil Bit - SecurityWeek cybersecurity Machine speed attacks require machine speed detection and response - BleepingComputer cybersecurity INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown - The Hacker News threat-intel Cybercriminals Used Claude and Grok to Launch Automated Attacks Against Banks - GBHackers cybersecurity Amazon says PHP2Shell exploitation began 4 days before patches - BleepingComputer threat-intel ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors - Wiz Research threat-intel K0T Hackers Target FortiGate, FortiWeb and Palo Alto GlobalProtect in Credential Theft Campaign - GBHackers cybersecurity Signal Vulnerability Lets Malicious Callers Block Hang-Ups - SecurityWeek
1 / 15
All news ›
Cybersecurity

Amazon says PHP2Shell exploitation began 4 days before patches

BleepingComputer ·

Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. [...]

Continue on BleepingComputer ↗ ‹ All news Get the newsletter

The summary and image come from BleepingComputer; the image is shown from their website.