PHP exploit attempts detected across Cloudflare’s network reached millions after critical vulnerabilities were publicly disclosed, CEO Matthew Prince said late Wednesday. His account adds a measure of exploitation activity to the emergency patching and service suspensions already reported.
Key Takeaways
- Prince said Cloudflare detected thousands of attempts in the 10 hours before public disclosure, rising to millions afterward.
- PHP developers released urgent fixes Wednesday and encouraged all users to update immediately.
- Mitsubishi UFJ Financial Group and Japan’s Finance Ministry temporarily suspended some services while taking protective measures.
Table of Contents
- PHP exploit attempts accelerate after disclosure
- Emergency fixes prompt service suspensions
- Conclusion
PHP exploit attempts accelerate after disclosure
In a post on X late Wednesday, Prince described a rapid increase in attempts against the widely used programming language. Cloudflare saw tens of thousands in the first 45 minutes after the announcement and hundreds of thousands within two hours, before the total reached millions.
The figures describe attempts observed across Cloudflare’s network, not confirmed successful compromises. Prince’s account also places thousands of attempts before the public announcement, rather than suggesting activity began only after disclosure.
Emergency fixes prompt service suspensions
PHP developers released urgent fixes on Wednesday for vulnerabilities that had remained in the software for years before being uncovered using AI. They encouraged all users to update immediately.
Government websites in Europe and elsewhere went offline as operators moved to protect their systems. Japanese lender Mitsubishi UFJ Financial Group said it was temporarily suspending some internet services as part of emergency measures.
Japanese Prime Minister Sanae Takaichi urged website owners Wednesday to check whether their sites use PHP and prepare to apply the fix. Japan’s Finance Ministry also temporarily suspended some website content and services while implementing security measures.
Conclusion
Cloudflare’s reported figures show how quickly exploitation attempts escalated around the disclosure, as PHP users faced urgent update guidance and some institutions temporarily restricted online services.
Read More News
Disclaimer
This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.
