A threat actor tried to exploit two critical PHP vulnerabilities four days before the flaws were publicly disclosed and patched, according to Amazon Threat Intelligence. The activity began on October 17, 2026, while the vulnerabilities were still under coordinated disclosure. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619 and known together as PHP2Shell, can allow remote […]
This article has been indexed from Cyber Security News
Read the original article:
Hackers Were Targeting Critical PHP Vulnerabilities Days Before They Were Patched