Detected four days before PHP2Shell abuse disclosure

Amazon's Threat Intel team said it detected the abuse of the urgent vulnerability PHP2Shell in a honeypot before it was disclosed. Since disclosure, exploitation has spread, and the speed of AI-generated attack code has risen. The report urges a review of operational practices, including deadline management and retrospective pre-surveys.

Why it mattersShows the urgency of strengthening security measures and provides material to prioritize countermeasures.