Hackers Exploited PHP2Shell Flaws Four Days Before Patches
- —Exploitation attempt logged October 17, patches released October 22
- —Attack came from an anonymized IP against an AWS honeypot
- —Public proof-of-concept exploits emerged after disclosure; flaws now widely exploited
- —AWS: AI is shrinking patch-to-exploit time to hours or minutes
Why it matters: Crypto exchanges and payment gateways running PHP face heightened risk as the window between patch and attack narrows to days.
Source: Wired Crypto