Watch Desk posted an update
The Hacker News reports millions of unsuccessful attempts to exploit the PHP2Shell vulnerabilities, with observed activity largely limited to scanning and efforts to deploy a Mirai botnet variant.
Why it mattersThe report says researchers have found tools and techniques aimed at bypassing ASLR, but weaponising the flaws has proved harder than expected. Emergency patches have been released. The useful distinction for server operators: the attempt count is not a count of successful intrusions. Have patches reached your PHP systems, or is the scale of scanning changing your priorities?
Discuss: Should organisations treat millions of unsuccessful exploit attempts as an emergency in themselves, or focus first on evidence of successful compromise?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.