On: Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

[paxy]

It's pretty telling that the attacks started after the vulnerability was found by researchers and PHP insiders notified. Who really believes that a malicious entity found the exact same exploit chain at the same time fully independently?

The PHP foundation needs to give a better answer for why they were asleep at the wheel for 2+ months while insiders were sharing/selling the info.

[nicce → paxy]

Well, according to OpenAI:s blog post, they led everything, other than the fix and release. I guess leader takes the responsibility?

[athrowaway3z → nicce]

Maybe its one of their swarms running out of control again (eg HF) that scanned their chatlogs (eg Navier Stokes) and found the exploit.