Cloudflare sees millions of exploit attempts after PHP disclosure


The logo of digital security firm Cloudflare is displayed over a booth at the Web Summit digital trade show in Vancouver, British Columbia, Canada, May 12, 2026. REUTERS/Chris Helgren

Oct 21 (Reuters) - Cloud services ⁠firm Cloudflare saw millions of exploitation attempts after ⁠the public disclosure of critical vulnerabilities in the ‌widely used programming language PHP, CEO Matthew Prince said in a post on X late on Wednesday.

"In the 10 hours before it was ​publicly announced, across the network we ⁠saw thousands of attempts ⁠to exploit it. That jumped to tens of thousands in ⁠the ‌45 minutes post announcement, hundreds of thousands within 2 hours, and millions now," Prince said.

Government websites ⁠in Europe and elsewhere went offline on ​Wednesday after the ‌disclosure of vulnerabilities in PHP sent website operators ⁠around the world ​scrambling to protect their systems.

Japanese lender Mitsubishi UFJ Financial Group said it was temporarily suspending some internet services due ⁠to emergency measures.

Developers of the PHP programming ​language on Wednesday released urgent new fixes to vulnerabilities that had been lurking in their software for years until they ⁠were uncovered using AI, saying all users were "encouraged to update immediately."

Japanese Prime Minister Sanae Takaichi also urged website owners on Wednesday to check whether their sites use PHP ​and prepare to apply the new ⁠fix.

Japan's Finance Ministry also temporarily suspended some website content ​and services while security measures were ‌being implemented.

(Reporting by Akanksha Khushi in ​Bengaluru and Raphael Satter; Additional reporting by Devika Nair and Mariko Katsumura; editing by Lincoln Feast.)

Follow us on our official WhatsApp channel for breaking news alerts and key updates!

Air Pollutant Index

Note: API is calculated based on 24hr running average of the most dominant parameter.

Highest API Readings

    Select State and Location to view the latest API reading

    Others Also Read