Hackers got a four-day head start on epic PHP2Shell vulnerability
Ars Technica
Read the full articleSecurity researchers revealed that hackers began exploiting the PHP2Shell vulnerability up to four days before it was publicly disclosed, giving attackers a significant advantage over defenders. This early activity highlights challenges in timely vulnerability reporting and mitigation.
- AI is finding software flaws faster, and so are hackers: Inside the PHP scramble· 2 sources
- AI found a critical PHP flaw. The bigger failure began in 2024.· The New Stack (AI)
- Millions of PHP2Shell attempts so far, but officials see no break-in· The Next Web
- PHP2Shell was only the beginning: AI is accelerating the patch race· 4 sources
- PHP knew about one of the flaws in 2024 but could not agree a fix· The Next Web
