cyber-crime

Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed

Attackers are hammering servers with millions of attempts to exploit the critical PHP2Shell vulnerabilities , with Amazon revealing that someone was already going after the flaws four days before they were publicly disclosed.

Cloudflare says it has recorded a staggering increase in attacks targeting the two vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, since details began circulating earlier this week.

According to Cloudflare CEO Matthew Prince , the company spotted thousands of exploitation attempts in the 10 hours before the vulnerabilities were publicly announced. That figure jumped to tens of thousands within 45 minutes of disclosure, hundreds of thousands within two hours, and has since climbed into the millions.

And the attackers aren't simply recycling the same exploit.…