✉news TechnologyCybersecurity first seen 1 d ago, last 16 h ago, peak #37
PHP bug known two years before PHP2Shell exploit went public
Original: PHP vulnerability post-mortem reveals bug was known two years ago — Small team of maintainers knew of the issue before it was made public, as new PHP2Shell chained exploit ravages servers
A small group of maintainers had known about the flaw roughly two years before it was disclosed publicly. The delay is drawing scrutiny as a chained exploit, dubbed PHP2Shell, is being used to compromise servers running PHP at scale. Security researchers are questioning the disclosure process, while administrators are urged to patch and harden affected systems as attacks continue to spread.
Why now: A widely exploited PHP flaw was apparently known internally for two years before disclosure, raising questions about vulnerability handling as attacks mount.
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/4880184