— ‘Amazon Threat Intelligence, another cybersecurity company, said PHP2Shell, as the vulnerability is known, was “now being broadly exploited in the wild” and it had identified several attempts from multiple actors to test ways to capitalise on the vulnerability before the fix was released by the PHP developers on Wednesday.
CloudFlare also said that in the 10 hours before the vulnerability was publicly announced, it saw thousands of attempts to exploit it, amid concern over the handling of the alert. One cybersecurity expert, Prof Alan Woodward, said the flaw was revealed a day before the patch was released, and that “somebody let the cat out of the bag”.’
the GuardianWebsites across world hit by millions of attempts to exploit PHP code flawProblem in language that underpins 70% of sites has led governments and companies to pull sites offline to patch fault