Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

- PHP2Shell 近 90 天出现 3 次
- 上一次:同一天稍早 · What the PHP2Shell rumors got wrong, from inside the PHP security team
发生了什么
Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability was under embargo, the targeting of a honeypot from an anonymized IP address […]
摘要按规则整理自下方来源原文