Hackers got a four-day head start on epic PHP2Shell vulnerability

Ars Technica reports: Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments and companies rush to secure their systems.

The world’s largest cloud computing provider on Wednesday said it had identified an attempt by hackers to exploit the bug four days before the weakness was disclosed to the public. Amazon added the flaws were “now being broadly exploited in the wild.”

This technology story centres on the United States. Names and organisations mentioned in the coverage include PHP, Internet and AI.

Why it matters

Technology stories like this can affect how people work, communicate and protect their data.

Key details

Location

United States · Americas

Reported by

Ars Technica

First reported

22 Oct 2026, 20:55 IST

Key names

PHP, Internet, AI, Read

Section

Technology

Sources

This is an independent summary. Read the full, original reporting from the publisher:

• Ars TechnicaHackers got a four-day head start on epic PHP2Shell vulnerability 22 Oct, 20:55

Read the full story at Ars Technica ↗

Spotted an error? Request a correction · How this summary was produced