NewsMarkets

Tech

Amazon Finds PHP2Shell Exploits Before Public Disclosure

Amazon detected attempts to exploit the PHP2Shell vulnerability four days before patches were released, while Cloudflare reports millions of related attacks.

2 publishers · 2 articles · first seen 22 Oct 2026 · updated 2d ago

Headline and summary written by an AI model from the linked articles; not reviewed by a person. How this was made

This story has stopped developing; this page is its permanent record. More from that day

The odds

How the odds moved · US Gov confirms PHP2Shell exploited by October 31, 2026?
0%50%100%91%23 Oct, 12:22 UTCnow

All 2 sources published before price tracking began

Price data
TimeChance of yes
now91%
23 Oct, 12:22 UTC91%

The story so far

2 publishers have covered this in 2 articles since 22 Oct 2026. Hacker News published first, on 22 October at 11:50 UTC; www.theregister.com followed 24 min later. The most recent article, from www.theregister.com, appeared on 22 October at 12:15 UTC.

Outlets reporting it: Hacker News, www.theregister.com.

One prediction market prices this story:

  • US Gov confirms PHP2Shell exploited by October 31, 2026? — the market puts it at 91%, with $1 traded in the last 24 hours, closing 1 Nov 2026. The market resolves to Yes if CISA adds either CVE-2026-109618 or CVE-2026-109619 to its Known Exploited Vulnerabilities Catalog by 11:59 PM ET on October 31, 2026. The decision relies on the "Date Added" field in that specific catalog entry. Readers often mistake general news reports or other agency announcements for the official source of truth.

Odds are the market's probability that the outcome happens, updated every few minutes. They are information about what traders expect, not a forecast we make and not investment advice.

Sources

Every article we clustered into this story. Headlines link to the publisher.

  1. Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure www.theregister.com
  2. Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure Hacker News

Related prediction markets

Linked by software because they are about the same subject. Most ask a different question from the one this story reports, so read each market's own question. How often the link is right

  • Polymarket US Gov confirms PHP2Shell exploited by October 31, 2026? 91% $1 24hends 1 Nov 2026

    Does the market have this right?

    Wrong market?

Have your say

Your call. How does this end?

Free, no money involved. Calls are scored against the market's price when you make them, so backing an underdog that wins scores most. Leaderboard · Your calls

Email me when the odds move

We email a link to confirm first. At most one alert email every six hours; unsubscribe in one click. Privacy

In this story

  • PHP2Shell
  • AWS
  • Cloudflare
  • Amazon
Embed this story

Paste this into any web page to show the live odds, with a link back here.