The PHP Incident

Wiz Research discovered two serious remote code execution vulnerabilities in PHP, called PHP2Shell, in late August and reported them to the PHP team on August 24. The team began working on fixes on September 21. Amazon apparently detected PHP2Shell in its environment, indicating potential exploitation.