php

PHP2Shell on AWS: Start on October 17, and Mind the 8 KB WAF Gap

AWS MadPot saw a PHP2Shell attempt on October 17, 2026, four days before the October 21 patch. Behind an ALB, AWS WAF reads only the first 8 KB of a request body, so the interim rule can miss an upload attack or block real uploads.