Hackers Hit Websites Days Before Fix for PHP Flaw
Your favorite sites may have been vulnerable—here's what you need to know.
The race to patch critical PHP vulnerabilities came after AWS said at least one actor began attempting to exploit the bugs, known collectively as PHP2Shell, on October 17—four days before Wednesday’s public disclosure. AWS spotted the attempt in a honeypot from an IP linked to a commercial anonymization network; it’s unclear how the actor got exploit information before disclosure or whether any attempts would have succeeded in real systems.
PHP is a widely used web scripting language, and AWS says PHP2Shell is now being broadly exploited in the wild. AWS also warns that AI-assisted analysis is shrinking the time from patch to working exploit, letting more actors act within hours or minutes once technical details are disclosed.
- Hackers exploited critical PHP flaws four days before a fix was available, targeting a decoy server.
- PHP powers most websites, so the flaws could have affected many popular sites.
- AI tools are making it faster for hackers to turn fixes into exploits, so updates are more urgent than ever.
Why It Matters
Your online accounts and data could be at risk if websites don't patch quickly—stay updated and alert.