Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure

The PHP2Shell vulnerabilities are already being exploited at scale, with Cloudflare reporting millions of attack attempts and AWS finding signs of probing before the flaws were publicly disclosed. For CIOs and technology leaders, this raises the operational risk of zero-day-style exposure in core infrastructure components like the PHP runtime, meaning patch timing, asset visibility, and rapid mitigation controls are now business-critical to limit potential outages, compromise, and emergency response costs.