[FLASH] PHP2Shell: exploit attempts reach millions, pre-disclosure probing confirmed, PHP flags a third flaw
SecurityWeek and The Register (Oct 22) report that Amazon honeypots caught an exploit attempt on Oct 17, four days before patches shipped. Cloudflare says attempts climbed into the millions after disclosure, and Censys counted about 1.57M unpatched internet-facing hosts. watchTowr said none of the circulating PoCs it examined achieved RCE. On Oct 23 PHP disclosed CVE-2026-115560, a narrower session-upload-progress flaw that will be fixed in a regular release (Techaeris). CNBC frames the episode as AI's 'Black October' because AI models helped find the bugs. Open questions: whether any successful compromises get confirmed, and what the remediation-spend read-through is for security vendors.