Technology & AI
The disastrous PHP vulnerabilities were exploited days before the patch
Source: The Verge · Published
Hackers attempted to exploit the PHP flaws impacting sites across the web days before they were patched, according to a report from Amazon Threat Intelligence . CJ Moses, Amazon chief information security officer, writes that the company's security team found a PHP2Shell exploit
Hackers attempted to exploit the PHP flaws impacting sites across the web days before they were patched, according to a report from Amazon Threat Intelligence . CJ Moses, Amazon chief information security officer, writes that the company's security team found a PHP2Shell exploit attempt on October 17th through a monitoring system designed to bait hackers, as reported earlier by Wired and Bleeping Computer . On Wednesday, websites scrambled to apply a patch for two critical security vulnerabilities affecting PHP , a programming language used by a large portion of the internet, including WordPress sites.
The flaws - CVE-2026-109618 and CVE-2026- … Read the full story at The Verge.
Related stories
Hackers got a four-day head start on epic PHP2Shell vulnerability
Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments and companies rush to secure their systems. The world’s largest cloud computing provider on Wednesday said
Ars Technica - All content ·
Zoe Kleinman: PHP is the cyber equivalent of an unexploded bomb
It has been a dramatic, public and global response, but the cyber event hasn't happened yet.
feeds.bbci.co.uk ·
Government websites in the EU and Canada taken offline over PHP vulnerability
All websites using PHP should update to the latest security patch.
Engadget - Technology News & Expert Reviews ·
Websites taken down worldwide as critical cyber-security update issued
The vulnerabilities with PHP, a programming language widely used across the internet, have been described as the most significant ever found by AI.
feeds.bbci.co.uk ·
AI Guardrails Aren’t Stopping Criminal Hackers
Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.
WIRED ·