7 hours ago · Global
The disastrous PHP vulnerabilities were exploited days before the patch
What's happening
SignalsMonitor is following this as a security story. The Verge and BleepingComputer are the outlets attached to this story. The reports are tied to Global. The first report grouped here was at 22 Oct 2026, 13:09 UTC. 2 material updates are listed in the timeline. The headline in use is “The disastrous PHP vulnerabilities were exploited days before the patch”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
Hackers attempted to exploit the PHP flaws impacting sites across the web days before they were patched, according to a report from Amazon Threat Intelligence. CJ Moses, Amazon chief information security officer, writes that the company's security team found a PHP2Shell exploit attempt on October 17th through a monitoring system…
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
Amazon says PHP2Shell exploitation began 4 days before patches
- New development reported by The Verge
The disastrous PHP vulnerabilities were exploited days before the patch
Same story, different outlets
2 headlinesEach line is that outlet's headline. The article stays on the publisher's site.