Matthew Prince

“That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within two hours, and millions now,”

Matthew Prince · said 2026-10-22 · reported 2026-10-22

Matthew Prince wrote on X that attempts to exploit the PHP vulnerabilities jumped from thousands to millions after the public announcement.

“There may not be any public evidence that the server was compromised, and the hacker could just be hanging out there.”

Matthew Prince · said date not stated · reported 2026-10-22

Prince warned that a hacker could remain undetected on a compromised server with no public evidence of intrusion.

“The scary thing here is that something could have gotten compromised very quietly,”

Matthew Prince · said date not stated · reported 2026-10-22

Prince noted the danger that servers could have been compromised without leaving any public evidence.