Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure
Amazon reported that it detected the use of the PHP2Shell web shell on its cloud services on October 17, several days before the vulnerability was publicly disclosed. The company said the intrusion was limited to a small number of accounts and that it had taken steps to remediate the issue and improve detection. No user data was reported compromised.