Bloomberg: High-Severity PHP Flaw Was Exploited Before Public Disclosure, With Over 22.6 Million Instances Exposed Worldwide
23.10.2026 03:30:01
Bollcoin, October 22: According to Bloomberg, Amazon's threat intelligence team found that hackers attempted to exploit two PHP security vulnerabilities as early as October 17, days before their public disclosure. After the flaws were made public on Wednesday, exploitation activity expanded further; Amazon said the vulnerabilities are being widely exploited but did not disclose specific victim information. Cybersecurity firm Palo Alto Networks found that more than 22.6 million exposed instances worldwide are affected by the vulnerabilities. Wiz researchers estimate the flaw could affect about 70% of the internet and has existed for more than a decade, while Matt Hull, vice president of cyber intelligence and response at NCC Group, warned that some vulnerable systems may already have been compromised or even backdoored.