Amazon detected an attempt to exploit critical PHP vulnerabilities four days before their public disclosure and says the flaws are now widely exploited. The bugs went undetected for over a decade before AI tools helped uncover them; the NSA urged users to patch immediately or take systems offline.