Bloomberg: PHP High-Risk Vulnerability Exploited by Hackers Before Public Disclosure

PANews, October 22: According to Bloomberg, Amazon’s threat intelligence team found that hackers had attempted to exploit the vulnerabilities days before the public disclosure of two PHP security flaws on October 17. After the vulnerabilities were disclosed on Wednesday, exploitation activities intensified, with Amazon stating that the flaws are being widely exploited, though it did not disclose specific victim information. Cybersecurity firm Palo Alto Networks discovered over 22.6 million exposed instances globally affected by these vulnerabilities. Wiz researchers estimated that the flaw may impact approximately 70% of the internet and has existed for over a decade. Matt Hull, Vice President of Network Intelligence and Response at NCC Group, warned that some vulnerable systems may already have been compromised and backdoors implanted.