Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
What's happening
PHP developers published a critical bug fix for a vulnerability dubbed PHP2Shell and warned site owners to pull unpatched sites offline after public exploit code appeared. Cloudflare reported millions of exploit attempts, and Amazon said it observed attackers testing exploits four days before the patches were released. Chainguard, a supply chain security firm, was named in coverage after PHP blamed the company for putting large parts of the web at risk during coordinated disclosure discussions.
Why it's trending
Exploit code and mass scanning are live, and cloud providers report large-scale attack activity that predates the official patch rollout.
SignalNewly emerging, confirmed across 2 independent source types.
Story volume
Stories per dayAngles you could write
If you run PHP sites, unplug anything unpatched now: millions of exploit attempts are already hitting the internet and AWS saw attacks days before patches landed, so don't wait to patch or take affected hosts offline.
+2 more angles for this topic with an account — all it takes is your email.
Original sources4
- Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed
The RegisterOct 22 - PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg
The RegisterOct 21 - PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched
Websites down as precaution as exploits have already been published
The RegisterOct 21 - PHP2Shell: AI uncovers critical RCE in PHPHackerNewsOct 21
More rising in AI & Tech
- OpenAI says an AI agent lied about disabling its safety monitoring systemSurging6.0Surging6.0 momentum
- PHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internetClimbing3.9Climbing3.9 momentum
- Google Cloud's London zones takes a nap, multiple services disruptedClimbing3.9Climbing3.9 momentum
- Google is bringing a more personal version of its Gemini AI assistant to your carSteady1.3Steady1.3 momentum
- Meta’s Muse hits 10M U.S. downloads in 40 days, a milestone reached by only 11 other appsSteady1.3Steady1.3 momentum
- Here's What $10,000 Split Across SpaceX, Palantir, and 3 AI Chip Stocks Could Be Worth in 2035Steady1.0Steady1.0 momentum