PHP编程语言被发现存在严重的安全漏洞，触发全球范围内的紧急应对。这一漏洞被命名为"php2shell"，属于远程代码执行（RCE）类型4，影响全球70%的网站2。亚马逊安全团队于10月17日通过蜜罐监控系统发现黑客已在补丁公开发布前四天开始尝试利用该漏洞13。Cloudflare首席执行官Matthew Prince披露，公告发布前的10小时内已观测到"数千次"利用尝试，公告后45分钟内跳升至"数万次"，2小时内达到"数十万次"，目前已增至"数百万次"2。
全球多个关键服务因紧急修补漏洞而受到影响。英国政府32个服务完全不可用，4个部分不可用，但英国技术部长Baroness Lloyd of Effra在上议院表示，大多数英国公众关键服务未受影响2。虽然目前尚无成功的黑客攻击报告，但网络安全专家警告情况紧迫。英国国家网络安全中心（NCSC）首席技术官Olly Whitehouse称此事件"前所未有"2，NCC Group副总裁Matt Hull指出"响应时间已大幅缩短"，攻击者现在可在数小时内利用漏洞2。数百万个网站如不及时修补，将面临被黑客攻击的风险2。
A severe security flaw in PHP, the programming language powering approximately 70% of the world's websites, has been discovered and is already under active exploitation by hackers. 24 According to Amazon's security team, attackers began attempting to exploit the PHP2Shell vulnerability through a honeypot monitoring system as early as October 17, 2026—four days before the patch was publicly disclosed. 13 Cloudflare's chief executive reported witnessing thousands of exploitation attempts in the ten hours before the vulnerability announcement, which escalated to tens of thousands within 45 minutes of disclosure, hundreds of thousands within two hours, and eventually millions of attacks. 2
The vulnerability represents a remote code execution (RCE) flaw with critical severity implications across global digital infrastructure. 4 Organizations worldwide have rushed to deploy emergency patches, with significant service disruptions occurring during the update window. In the United Kingdom alone, 32 government services became completely unavailable and four others partially offline, though Baroness Lloyd of Effra, the UK technology minister, stated that most critical public services remained unaffected. 2 The National Cyber Security Centre's chief technology officer, Olly Whitehouse, characterized the incident as unprecedented, while cybersecurity experts warned that the compressed timeframe for response—now allowing attackers to exploit the flaw within hours—has dramatically narrowed the window for organizations to defend themselves. 2
评论
还没有评论，欢迎留下第一条。