PHP High-Risk Vulnerability Exploited by Hackers Before Disclosure, May Affect 70% of the Internet

ChainCatcher reports that Amazon’s threat intelligence team found that hackers had attempted to exploit two PHP security vulnerabilities several days before they were publicly disclosed. After the vulnerabilities were made public on Wednesday, exploitation activity intensified, with Amazon stating that the flaws are being widely exploited, though it did not disclose specific victim information. Cybersecurity firm Palo Alto Networks discovered over 22.6 million exposed instances globally affected by these vulnerabilities. Wiz researchers estimate that the flaw may impact around 70% of the internet and has existed for more than a decade. Matt Hull, Vice President of Network Intelligence and Response at NCC Group, warned that some vulnerable systems may already have been compromised and backdoors implanted.