Reports of PHP bug exploitation attempts grow as experts downplay viability of exploits The two PHP vulnerabilities dominating headlines this week have left experts with a mixed bag of data to track. Multiple large companies have reported an explosion in attempted exploitation. But dozens of experts told Recorded Future News that none of the attempts have been successful and argued that most of the available proof-of-concept (PoC) exploits only work in ideal lab conditions — making mass exploitation unlikely as of Friday. Experts at Amazon drew headlines on Thursday with a report that they saw evidence of exploitation attempts dating back to October 17, days before news broke of CVE-2026-109618 and CVE-2026-109619 — now known colloquially as PHP2Shell. Sophos reported and then retracted a…