PHP2Shell attacks began four days before patches, Amazon says, as attempts hit millions

Posted Thursday, October 22, 2026 7:27 pm

Duncan Riley (via SiliconANGLE)

Attackers began targeting the critical PHP2Shell vulnerabilities four days before patches were released, Amazon.com Inc. has disclosed, while exploit attempts seen by Cloudflare Inc. have since climbed into the millions. PHP’s maintainers shipped fixes for the two flaws, tracked as CVE-2026-109618 and CVE-2026-109619, on Wednesday after details leaked ahead of a coordinated release. The bugs […]

The post PHP2Shell attacks began four days before patches, Amazon says, as attempts hit millions appeared first on SiliconANGLE.

Continue reading at SiliconANGLE »

Keywords

NEWS, Security, The-Latest, Top Story 3, Amazon, Amazon Integrated Security, Bitkom, Black Hills Information Security, CJ Moses, CloudFlare, CVE-2026-109618, CVE-2026-109619, cybersecurity, Dataminr, Defiant, East Japan Railway, end-of-life software, exploits, Felix Kuhlenkamp, Hannu Naumanen, honeypots, John Strand, Justin Beals, MadPot, Matthew Prince, Michael Centrella, Microsoft, Mitsubishi UFJ Financial Group, National Security Agency, National Tax Agency, Nomura Holdings, OpenAI, patching, PHP, PHP2Shell, Satya Nadella, Secret Service, SecurityScorecard, Strike Graph, Valtori, VulnCheck, vulnerabilities, WordFence, wordpress