The disastrous PHP vulnerabilities were exploited days before the patch

Hackers attempted to exploit PHP flaws days before the patch, with Amazon's security team detecting a PHP2Shell exploit attempt on October 17th through a monitoring system designed to bait hackers.