AMAZON THREAT INTELLIGENCE IDENTIFIES PHP2SHELL EXPLOITATION PRIOR TO PUBLIC DISCLOSURE IN MADPOT

Summary from the TLDR IT newsletter

The company advises security teams to measure mitigation timelines in hours, investigate from the earliest known exploitation date, and invest in signature-independent detections.