Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

aws.amazon.comOct 22, 4:50 AM PT

Context: Attackers began exploiting the PHP2Shell vulnerabilities four days before patches; SiliconANGLE reports exploit attempts seen by Cloudflare have climbed into the millions.

Read the original at aws.amazon.com ↗Hacker News ↗ · 268 pts · 99 comments SiliconANGLE ↗

Source: aws.amazon.com (aws.amazon.com)
Published: Oct 22, 4:50 AM PT
First seen here: Oct 23, 8:16 PM PT
Edition: Friday, October 23, 2026, ranked 25
Status: The company itself announced or confirmed this.
Engagement: As shown by each platform when we last looked (Oct 23, 8:16 PM PT).
Topics: Security, Open source

Launch

Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller (opens github.com)

A Show HN honeypot that poses as a supermarket refrigeration controller, built after recent attacks on industrial fridge installations.

GitHub9:27 AM PTNov 7, 2026 Details

Launch

Show HN: Agentic Identity Broker, OAuth Delegation for AI Agents (opens github.com)

An MIT-licensed OAuth2 broker from the Zalando Incubator that lets a user give an AI agent scoped access.

GitHub7:07 AM PTNov 6, 2026 Details

News

OpenAI details a pipeline that used an upcoming cyber model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2M in API costs (opens openai.com)

OpenAI details a pipeline that used an upcoming cyber model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2M in API costs — Security research that once required a separate, sustained investigation for each finding can increasingly be run as a systematic…

OpenAI6:50 PM PTNov 4, 2026 Details

Launch

Show HN: Kairos – Open-source risk and fraud decisioning platform (opens github.com)

Finic's Kairos is an open-source alternative to real-time fraud decisioning platforms such as Sift and Sardine.

GitHub1:16 PM PTNov 3, 2026 Details

Launch

Anthropic releases FlashProve, an open-source prototype that cryptographically verifies an AI response came from a given model, not one that a router swapped in (opens anthropic.com)

The prototype would let anyone check that a response really came from the model it claims to be from.

Anthropic1:10 PM PTNov 3, 2026 Details

AnalysisOpinion

The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO (opens techcrunch.com)

The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched.

TechCrunch11:50 AM PTOct 28, 2026 Details

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure · Keeping Up with Silicon Valley

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

Related stories

Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller (opens github.com)

Show HN: Agentic Identity Broker, OAuth Delegation for AI Agents (opens github.com)

OpenAI details a pipeline that used an upcoming cyber model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2M in API costs (opens openai.com)

Show HN: Kairos – Open-source risk and fraud decisioning platform (opens github.com)

Anthropic releases FlashProve, an open-source prototype that cryptographically verifies an AI response came from a given model, not one that a router swapped in (opens anthropic.com)

The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO (opens techcrunch.com)