The disastrous PHP vulnerabilities were exploited days before the patch
Summary
Security monitoring systems detected active hacker attempts targeting critical PHP vulnerabilities days before developers released a software patch. Amazon Threat Intelligence reported that malicious actors tried to leverage the flaws against online sites using a specific exploit method.
Hackers attempted to exploit the PHP flaws impacting sites across the web days before they were patched, according to a report from Amazon Threat Intelligence. CJ Moses, Amazon chief information security officer, writes that the company's security team found a PHP2Shell exploit attempt on October 17th through a monitoring system designed to bait hackers, as reported earlier by Wired and…
Source: Read the full story at The Verge
Disclaimer: This content is for informational and educational purposes only and is not financial, investment or trading advice. Tech & Money Press is not a registered investment adviser or broker-dealer. Trading stocks, options and crypto involves substantial risk, including the loss of your entire investment. Do your own research and consult a licensed professional before making any financial decision. The authors may hold positions in the securities mentioned. News summaries are written with AI assistance from the original publisher's report and may contain errors; always check the original source. Full disclaimer.