Cloudflare Sees Millions of PHP Exploit Attempts

Cloudflare’s network logged millions of PHP exploit attempts after two critical vulnerabilities were publicly disclosed. In the 10 hours before the disclosure, the company already saw thousands of attacks. The PHP Foundation delayed a fix because of limited resources, even though the flaw was first spotted in 2024. Emergency patches for the two bugs were released the same day they were announced. PHP powers about 69% of websites, and roughly one in five sites route traffic through Cloudflare. The FBI’s Cyber Division warned that the flaws could let attackers run code remotely and compromise data. Several organizations and government agencies pulled sites offline on Wednesday to prevent potential breaches. Users are urged to apply the updates immediately.