Someone Knew About PHP's Critical Flaws Four Days Before the Public Did and Amazon Can't Explain How

Thu, 22 Oct 2026 15:22:02 +0000

Amazon's chief information security officer, CJ Moses, reported that the earliest PHP2Shell exploit attempt was detected on 17 October, four days before public disclosure. The request came from an anonymised IP address geolocated to Australia, but the operator's identity remains unclear.

Source: techtimes.co.uk

Php on Ask Sendai

Someone Knew About PHP's Critical Flaws Four Days Before the Public Did and Amazon Can't Explain How