Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet.
Source: Wired – Threat Level
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
- Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
- Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
- A critical flaw affecting 70% of all websites has the cybersecurity world panicked
- Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside
- Introducing Our New Surveillance Self-Defense Guide: Online Privacy for Parents and Youth