Don Smith

“Across all our telemetry, and we are looking hard, we have only seen a couple of real exploitation attempts,”

Don Smith · said 2026-10-22 · reported 2026-10-22

Sophos reported seeing only a couple of real exploitation attempts across their telemetry on the day after government warnings about the PHP vulnerabilities.

“My sense is that these [vulnerabilities] are harder to exploit than folks thought at first, so this could be a slow burn,”

Don Smith · said date not stated · reported 2026-10-22

Smith suggested the PHP vulnerabilities may be harder to exploit than initially thought, potentially resulting in a slower-paced threat.