PHP vulnerabilities exploited days before official patch release

Amazon Threat Intelligence reported that hackers attempted to exploit critical PHP vulnerabilities days before patches were released. The company's security team detected a PHP2Shell exploit attempt on October 17th using a monitoring system designed to bait hackers. This highlights the urgency and risk posed by unpatched software flaws on the web.

Originally published by theverge