Over the past 48 hours, multiple security flaws and vulnerabilities have been reported online. While PHP2Shell is still the primary vulnerability that’s got everyone scared, it’s not the only critical bug that was reported in the past two days.

Now, nobody panic! Yes, it’s kinda scary that everything on the internet is breaking at once, but let’s get our ducks in a row before we start unplugging all our electronics and covering our windows with tinfoil. First things first, is it a coincidence that these vulnerabilities have all been reported at the same time, or is there a more sinister explanation for all this? The latter.

I think it’s best to have the experts explain this one, so here are two quotes that I believe put it all into perspective. Firstly, Cloudflare CEO Matthew Prince on X: “In the 10 hours before [the PHP vulnerability] was publicly announced, across the Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.”

Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.

Here’s a second quote from Wiz Research , one of the research teams that discovered the PHP vulnerability: “Pre-AI, this manual work would be difficult to implement and even harder to scale[…]This changes the economics of both discovery and exploitation.

Source link