PHP2Shell: the investigation window starts before the patch
Amazon observed attack attempts before public disclosure. That changes the period defenders need to examine, without proving every targeted server was compromised.
Topic archive
PHP
Follow2 stories
PHP’s critical security release is due today. Prepare the deployment now
Two critical flaws have prompted an advance patch notice. The release is scheduled for 14:00 UTC; the official affected-version matrix is still forthcoming.