{"ok":true,"nota":{"id":"fe41f57c2bf5fe86","slug":"amazon-detecto-ataques-con-una-falla-de-php-antes-de-que-se-hiciera-pu-fe41f5","titulo":"Amazon detectó ataques con una falla de PHP antes de que se hiciera pública","resumen":"El equipo de seguridad de Amazon informó que identificó la explotación de una vulnerabilidad en PHP, llamada PHP2Shell, el 17 de octubre, antes de su divulgación pública. Los atacantes la usaban para ejecutar comandos en servidores que no estaban parchados.","fuente":"hackernews","fuenteNombre":"Hacker News","color":"#ff6600","autor":"cubefox","url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/","imagen":"/hoy/portada/fe41f57c2bf5fe86","tema":"tecnologia","subtemas":["seguridad informática","vulnerabilidades","php","servidores","ciberataques"],"entidades":["Amazon","AWS"],"formato":"dato","entretenimiento":false,"pubTs":"2026-10-22T11:50:36.000Z","indexTs":"2026-10-22T16:38:44.280Z","hash":"e89bc143943da35be8d1d28edf87e4daed348673467c781b083f6bf4f3f543c5","tsa":{"time":"Oct 22 16:39:43 2026 GMT","provider":"freetsa.org","sobre":"sello"},"stats":{"views":1,"likes":1,"clicks":0,"dwell":31},"tipo":"normal","registro":"hallazgo","porQueImporta":"Muchos sitios argentinos, desde blogs hasta tiendas online, corren sobre PHP, y el tiempo entre que un ataque empieza y que se publica el parche es justamente cuando más expuestos están. Lo que pasó indica que los atacantes ya estaban usando la falla mientras nadie la conocía. Para quien administra un sitio o una cuenta de hosting, la consecuencia práctica es actualizar apenas salga un parche y no esperar a que alguien lo avise.","quienFirma":"Amazon Web Services","confianza":"divulgacion","consulta":null},"sello":{"hash":"e89bc143943da35be8d1d28edf87e4daed348673467c781b083f6bf4f3f543c5","sello":"47a4f188c9ef7bdc5315f58c5fdf1692d9c7c73e8d9eb01520c63080393a6170","beacon":{"drand":{"cadena":"8990e7a9aaed2ffed73dbd7092123d6f289930540d7651336225dc172e51b2ce","ronda":6575204,"aleatorio":"ac0f4a6ce509202540c9641abb3a70f7f06eeb36f68a34e1bc3e430369a775da","tiempo":"2026-10-22T16:39:00.000Z"},"nist":{"cadena":2,"pulso":1994801,"salida":"123765DCC46130497358D1E6393BF76FC82D205E2F260DEF171C4887B733C1209F31A193DDD877AB50C2E9F79D0A125A26712AD900F817275AC0E40E5C1C39BC","tiempo":"2026-10-22T16:38:00.000Z"},"noAntes":"2026-10-22T16:39:00.000Z"},"verificacion":{"drand":true,"nist":true},"tsa":{"time":"Oct 22 16:39:43 2026 GMT","provider":"freetsa.org","sobre":"sello"},"original":{"titulo":"Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure","descripcion":"Article URL: https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/ Comments URL: https://news.ycombinator.com/item?id=50194070 Points: 181 # Comments: 52","pubDate":"Thu, 22 Oct 2026 11:50:36 +0000","url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/"},"indexado":"2026-10-22T16:38:44.280Z"}}