Evidence shows PHP2Shell exploitation began before public disclosure

Amazon threat researchers detected attempts to exploit the PHP2Shell vulnerabilities four days before the flaws and patches became public. The vulnerabilities permit unauthenticated remote-code execution in software underlying a large share of the web, requiring organizations to patch immediately and investigate possible earlier compromise.