Ars Technica Follow Hackers got a four-day head start on epic PHP2Shell vulnerability Hackers were already probing the bug before defenders were told it existed. https://arstechnica.com/security/2026/10/hackers-got-a-four-day-head-start-on-epic-php2shell-vulnerability/ arstechnica.com