AI & Enterprise
Hackers tried to exploit PHP flaws four days before patch, could be Log4Shell-scale
Hackers began searching for vulnerable servers and attempting attacks four days before patches for two critical PHP flaws were released, SecurityWeek reported on Oct. 22 citing Amazon. The flaws, known as PHP2Shell, can be used to remotely control servers. Amazon said exploit activity accelerated after information leaked online and that PHP2Shell is now widely abused. Researchers and companies estimate millions of PHP hosts remain unpatched, and CISA urged immediate updates.
