Hackers Began Exploiting PHP Vulnerability Four Days Before Defenders Were Alerted

Attackers were already probing a serious PHP vulnerability before security defenders learned that the flaw existed. The early activity gave malicious actors a roughly four-day window in which defenders had no warning. The report indicates that hackers were actively testing the bug during this period. The incident highlights the gap between when a flaw is exploited in the wild and when it is publicly disclosed to the security community.