Threat Actors Exploit PHP2Shell Before Patch

Threat actors exploited two critical PHP2Shell vulnerabilities on October 17, four days before patches released on October 20. Amazon detected the attack from an Australian IP, while Cloudflare observed thousands of attempts in ten hours. CISA urges immediate updates to PHP 8.5.12.