ITmedia AI+
Original published: Updated on DevPick:
PHP2Shell exploitation attempts 4 days before disclosure; Amazon urges retrospective investigation prior to the public date
Amazon's threat research team detected exploitation attempts of the PHP vulnerability 'PHP2Shell' four days before its public disclosure, highlighting the acceleration of AI-generated attack code.
Key points
- •Exploitation attempts of the emergency PHP vulnerability 'PHP2Shell' were detected via honeypots four days before public disclosure.
- •Exploitation expanded rapidly after the vulnerability was publicly disclosed.
- •The report points out the acceleration of AI-generated attack code and calls for a re-evaluation of premises, such as managing response deadlines in hours and conducting retrospective investigations prior to disclosure.