PHP2Shell exploitation started days before patch release

Security researchers at Amazon report that attackers actively exploited PHP2Shell flaws four days prior to the release of official security patches. Administrators are urged to immediately audit affected systems for signs of compromise and apply available updates with high priority to mitigate ongoing risks.