AINewsnow

Exploitation Started Four Days Before the Patch: PHP2Shell and the End of the Patch Window

This story is from 2026-10-30. It is preserved in the archive; the latest stories are on the live feed.

Attackers were recorded trying PHP2Shell on October 17, 2026. The patch shipped on October 21. If your exposure clock starts at disclosure, your clock is wrong by four days before you have done anything else. Your patch process probably has a tidy timeline somewhere. A CVE drops, the ticket opens,…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-30 13:15 · DEV Community — AI
    Exploitation Started Four Days Before the Patch: PHP2Shell and the End of the Patch Window

More stories

  1. Gemini 4 Carbon: Our next frontier model — Google DeepMind Blog
  2. Welcome Le Chonk: Mistral Large 4 on Hugging Face — Hugging Face Blog
  3. Meta quietly launches an AI fashion app called Style Sketch — TechCrunch AI
  4. Anthropic’s IPO filing spends 69,800 words on AI’s risks to investors and says little about the risks to the rest of us — Fortune AI
  5. US tech stocks fall after earnings fuel AI spending concerns — Financial Times AI
  6. From synthetic enterprise data evaluations to real Microsoft Copilot AI confidence — Microsoft Research Blog
  7. 7 Agentic Service Strategies For Startups — Salesforce AI Blog
  8. AI can turn public security fixes into working exploits before users receive an update — Epoch AI

Get the daily brief of stories like this at 6:30 every morning →