Tech giants Google, OpenAI, and Amazon are collaborating to analyze and mitigate the impact of the PHP2Shell vulnerabilities. These flaws allow for remote code execution, posing a significant risk of data breaches.
The US National Security Agency and international counterparts in the UK, Singapore, Australia, Canada, and the EU have advised organizations to apply security patches immediately or disable affected systems.
Amazon's MadPot monitoring system detected exploitation attempts as early as October 17. Google utilized its Gemini AI models to assess the severity of the flaws and test the effectiveness of security patches.
OpenAI noted that its AI models assisted researchers in identifying the vulnerabilities, while warning that criminals could leverage similar tools. Cloudflare activated web application firewalls to block ongoing attacks.
Security firm VulnCheck observed exploitation attempts from IP addresses in China, Canada, and the Netherlands. Meanwhile, services including Pinboard and various Dutch government resources temporarily suspended operations.
