Hackers began probing PHP2Shell flaw before disclosure
What happened
On 22 October 2026, Ars Technica reported that hackers began probing the high-severity PHP2Shell vulnerability four days before defenders knew it existed. The report notes a clear time gap between disclosure and defensive response, giving attackers a head start. So far this is the only report on the incident, with no further information on the scope of probing, affected systems or remediation progress.
Written by AI from the reports · updated 4 h ago
Timeline
Follow the reports to see the event from each side.
- Ars Technica · AIHackers got a four-day head start on epic PHP2Shell vulnerability
Hackers were already probing the bug before defenders were told it existed.
Heat of this event
Current heat 5·Peak in the comparable range 5（Oct 23 23:00）·Change over 24 hours in the comparable range –
The trend compares only the same accounts observed without a break, so its range can be narrower than the current heat count. Move the pointer or tap the chart to see each hour; with a keyboard, use the left and right arrow keys.