PHP2Shell attacks began four days before patches, Amazon says, as attempts hit millions
Amazon disclosed that attackers began exploiting two critical PHP vulnerabilities before official patches were made available. Cloudflare reported that exploitation attempts have escalated into the millions. PHP maintainers released fixes after vulnerability details leaked ahead of the planned coordinated disclosure.
Key points
- Attacks began four days before patches were released
- Millions of exploit attempts recorded by Cloudflare
- Details leaked ahead of coordinated security release
- Two CVEs tracked: CVE-2026-109618 and CVE-2026-109619
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. SiliconANGLE did the reporting; read the original for the full story.
Read the full story at SiliconANGLE
