Hackers got a four-day head start on epic PHP2Shell vulnerability.

Hackers were already probing the bug before defenders were told it existed.