Bloomberg: High risk PHP vulnerabilities were exploited by hackers before being made public, exposing over 22.6 million instances worldwide According to Bloomberg, Amazon's threat intelligence team found that hackers had attempted to exploit two security vulnerabilities in PHP as early as October 17th, just days before their public disclosure. After the vulnerability was revealed on Wednesday, hacker exploitation activities further expanded. Amazon stated that the relevant vulnerability is being widely exploited, but did not disclose specific victim information. Network security company Palo Alto Networks has discovered vulnerabilities in over 22.6 million exposed instances worldwide. Wiz researchers estimated that the vulnerability may affect about 70% of the Internet and has existed for more than ten years. Matt Hull, vice president of network intelligence and response of NCC Group, warned that some vulnerable systems may have been invaded, or even implanted into the back door.