Hackers got a four-day head start on epic PHP2Shell vulnerability

Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments and companies rush to secure their systems. The world’s largest cloud computing provider on Wednesday said it had identified an attempt by hackers to exploit the bug four days before the weakness was disclosed to the public. Amazon added the flaws were “now being broadly exploited in the wild.”.

Published 22-Oct-2026 17:45 UTC · First seen 22-Oct-2026 17:45 UTC

Sources

• Ars Technica Security · 22-Oct-2026