points by commandersaki 1 day ago | 0 comments
The independent researcher who published a proof of concept before the release did not.
Just to clarify that no actual PoC was published, just a demonstration video was floating about.
[–] eddyg 21 hours ago
[–] Sander_Marechal 22 hours ago
Doesn't matter. They video signaled to attackers that it was discoverable so they all pointed their clankers at the PHP source to go and find it.
⁽¹⁾ https://aws.amazon.com/blogs/security/amazon-threat-intellig...