Remix.run Logo
▲ minitech 8 hours ago

Which companies? The earliest claim of an exploit attempt in the wild I had heard was October 17th, and that was “extant”, not “rampant”.

I don’t suppose you’re thinking of when the issue was discovered? That was August 1st, according to https://calif.io/php2shell/#the-discovery.

▲nubinetwork 8 hours ago | parent [-]

Amazon said 4 days prior to patch, but I'm pretty sure the other one was cloudflare, I can't find the link in my browser history.

▲minitech 8 hours ago | parent | next [-]

So was “months” a typo for “4 days” or what?

▲makmanalp 5 hours ago | parent | prev | next [-]

Both of those are coming from telemetry, and mainly show attempts. Those telemetry are generally heuristic based so they overcount and are most often unsuccessful - it took much layer for actual honeypots to be hit. See my timeline in my other comment if you’re interested in details and extract dates

▲red-iron-pine 5 hours ago | parent | prev [-]

4 days is a month now is it?