Cloudflare CEO Matthew Prince reported that the network recorded millions of attempts to exploit the vulnerability following its public disclosure. In the 10 hours leading up to the PHP vulnerability disclosure, thousands of attempts were recorded, which have now increased to "millions." Cloudflare is an internet infrastructure company that helps speed up website loading and protects them from cyberattacks. According to the company, about one-fifth of all websites worldwide route traffic through its network.
On Wednesday, the PHP Foundation acknowledged that a lack of resources delayed the patching of a critical vulnerability first identified in 2024 and released emergency patches for two critical vulnerabilities. The vulnerability could allow attackers to spread malware or inject malicious scripts on websites worldwide. PHP is used on approximately 69% of sites with a known server-side programming language, according to research service W3Techs.
The FBI on Wednesday warned that two critical vulnerabilities could "allow attackers to remotely execute code in the PHP core, potentially compromising sensitive data and networks." As a result, organizations are urged to either immediately install updates or disable their systems. On Wednesday, several organizations and government agencies shut down their websites as a precautionary measure. This decision was made to prevent potential attacks on systems using the vulnerabilities.
This material is prepared solely for informational purposes and does not constitute financial advice or a recommendation.
Related articles
