Get the latest tech news

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure


Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability was under embargo, the targeting of a honeypot from an anonymized IP address […]

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of Amazon

Amazon

Photo of Oct

Oct

Photo of public disclosure

public disclosure

Related news:

News photo

Amazon announces five new Blink home security cameras

News photo

Amazon Rivals Apple's iPad Offering With New Alexa Tablet 12 Pro: Review

News photo

AWS rates PHP RCE as Important so Amazon Linux 2023 patch may take 20 days