Zero-Day Exploit Attempt Detected Ahead of PHP2Shell Disclosure

Amazon’s Threat Intelligence team revealed that exploitation attempts targeting the PHP2Shell vulnerabilities occurred four days prior to public disclosure. The attacks hit a honeypot service from an IP associated with a commercial anonymization network. System administrators are strongly advised to apply available patches immediately to mitigate active exploitation in the wild.