Threat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities