Analysis: Critical PHP vulnerabilities were exploited by hackers before public disclosure, potentially affecting about 70% of the internet

Odaily reports: Amazon's threat intelligence team found that hackers attempted to exploit two PHP security vulnerabilities days before their public disclosure on October 17. After the vulnerabilities were made public on Wednesday, exploitation activity expanded further. Amazon said the vulnerabilities are being widely exploited but did not disclose specific victim information.

Cybersecurity firm Palo Alto Networks found that more than 22.6 million exposed instances worldwide are affected by the vulnerabilities. Wiz researchers estimated that the vulnerability could affect about 70% of the internet and has existed for more than a decade, while Matt Hull, vice president of cyber intelligence and response at NCC Group, warned that some vulnerable systems may already have been compromised or even implanted with backdoors. (Bloomberg)