Analysis: PHP high-risk vulnerabilities were exploited by hackers before being made public, potentially affecting about 70% of the internet

The Amazon Threat Intelligence Team discovered that hackers attempted to exploit related vulnerabilities days before the public disclosure of two security vulnerabilities in PHP. After the vulnerabilities were disclosed on Wednesday, hackers further expanded their exploitation activities. Amazon stated that the related vulnerabilities are being widely exploited but did not disclose specific victim information.

Cybersecurity company Palo Alto Networks found that there are over 22.6 million exposed instances globally with related vulnerabilities. Wiz researchers estimated that the vulnerabilities could affect about 70% of the internet and have existed for over a decade, while Matt Hull, Vice President of Cyber Intelligence and Response at NCC Group, warned that some vulnerable systems may have already been compromised or even implanted with backdoors.