AWS detected PHP2Shell exploit attempt four days before public disclosure
Amazon says its security telemetry recorded an attempt to exploit critical PHP flaws on October 17, before fixes were released. It remains unclear how the actor learned of the flaws.