字号·· | 护眼
TheVerge

灾难性 PHP 漏洞在补丁发布前数天即遭利用The disastrous PHP vulnerabilities were exploited days before the patch

点「原文对照」整页切到原文,或双击某段只看那段的原文。

图片由阿米莉亚·霍洛瓦蒂·克拉莱斯为The Verge拍摄Photo by Amelia Holowaty Krales / The Verge

据亚马逊威胁情报部门的一份报告,黑客在补丁发布前数天就试图利用影响全网站点的 PHP 漏洞。亚马逊首席信息安全官 CJ Moses 写道,公司安全团队于 10 月 17 日通过一个旨在引诱黑客的监控系统发现了一次 PHP2Shell 利用尝试,此前 和 已对此进行了报道。

Hackers attempted to exploit the PHP flaws impacting sites across the web days before they were patched, according to a report from Amazon Threat Intelligence. CJ Moses, Amazon chief information security officer, writes that the company's security team found a PHP2Shell exploit attempt on October 17th through a monitoring system designed to bait hackers, as reported earlier by and .

周三,网站纷纷争分夺秒地应用补丁,以修复影响 PHP 的两个关键安全漏洞。PHP 是一种编程语言,被互联网很大一部分网站使用,包括 WordPress 站点。这些漏洞为 CVE-2026-109618 和 CVE-2026- …

On Wednesday, websites scrambled to apply a patch for two critical security vulnerabilities affecting PHP, a programming language used by a large portion of the internet, including WordPress sites. The flaws - CVE-2026-109618 and CVE-2026- …

阅读媒体原文 ↗