Amazon detectó intentos de explotación de PHP2Shell días antes de que se divulgaran las vulnerabilidades y su parche

Amazon detectó intentos de explotación de PHP2Shell días antes de que se divulgaran las vulnerabilidades y su parche

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page es/news/europapress/portaltic-ciberseguridad-noticia-amazon-detecto-intentos-exp, snapshot 20261023T232528Z. Copied byte for byte; every file's sha256 is in captures/20261023T232528Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Europa Press (Spanish), 23 October: Amazon detected attempts to exploit PHP2Shell days before the vulnerabilities and their patch were disclosed, according to an Amazon Threat Intelligence report; The PHP Group published the two critical flaws, CVE-2026-109618 and CVE-2026-109619, on 21 October and released the urgent security update that day.

> Actores de amenazas intentaron explotar las vulnerabilidades críticas identificadas en el ecosistema PHP, conocidas como PHP2Shell, días antes de que se hicieran públicas el pasado miércoles, como se desprende de un informe de Amazon Threat Intelligence.

_Curator's translation:_ "Threat actors tried to exploit the critical vulnerabilities identified in the PHP ecosystem, known as PHP2Shell, days before they were made public last Wednesday, as an Amazon Threat Intelligence report shows."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Amazon detectó intentos de explotación de PHP2Shell días antes de que se divulgaran las vulnerabilidades y su parche". Selected mechanically, not read by a person.

Capture notes

Language es. Nothing in the page addresses an AI or hides text from a reader.