{
  "id": 16041657,
  "title": "Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure",
  "url": "https://urgent.news/2026/10/22/hackers-pile-on-php2shell-as-aws-reveals-attacks-began-before",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-22T12:15:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/cyber-crime/2026/10/22/hackers-pile-on-php2shell-as-aws-reveals-attacks-began-before-disclosure/5304749"
  },
  "original_language": "en",
  "account": "Hackers are bombarding servers with millions of attempts to exploit critical PHP2Shell vulnerabilities, revealing that the attacks began four days before the flaws were publicly disclosed. Amazon reported that someone attempted to exploit PHP2Shell on October 17, four days before the patches were released. Cloudflare, a cloud computing company, has observed a surge in attacks targeting the two vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, since details began circulating earlier this week. The company's CEO, Matthew Prince, stated that their systems detected thousands of exploitation attempts within the first 10 hours of the vulnerabilities being announced, which jumped to tens of thousands within 45 minutes, hundreds of thousands within two hours, and has since climbed into the millions.",
  "summary": "Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed",
  "key_points": [
    "Hackers bombard servers with millions of exploit attempts",
    "Attacks began four days before disclosure on October 17",
    "Cloudflare sees surge in CVE-2026-109618 and CVE-2026-109619 attacks"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}