Cloudflare sees millions of exploit attempts after PHP disclosure
Cloudflare sees millions of exploit attempts after PHP disclosure Oct 21 (Reuters) - Cloud services firm Cloudflare NET.N saw millions of exploitation attempts after the public disclosure of critical vulnerabilities in the widely used programming language PHP, CEO Matthew Prince said in a post on X late on Wednesday.
"In the 10 hours before it was publicly announced, across the network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now," Prince said.
Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of vulnerabilities in PHP sent website operators around the world scrambling to protect their systems.
Japanese lender Mitsubishi UFJ Financial Group 8306.T said it was temporarily suspending some internet services due to emergency measures.
Developers of the PHP programming language on Wednesday released urgent new fixes to vulnerabilities that had been lurking in their software for years until they were uncovered using AI, saying all users were "encouraged to update immediately."
Japanese Prime Minister Sanae Takaichi also urged website owners on Wednesday to check whether their sites use PHP and prepare to apply the new fix.
Japan's Finance Ministry also temporarily suspended some website content and services while security measures were being implemented.
(Reporting by Akanksha Khushi in Bengaluru and Raphael Satter; Additional reporting by Devika Nair and Mariko Katsumura; editing by Lincoln Feast.)
Recent news on Cloudflare
See all newsAsian governments step up cyber defences after PHP flaw (updated)
Cloudflare sees millions of exploit attempts after PHP disclosure
Explainer: What is PHP and why did it take government websites offline?
US RESEARCH ROUNDUP-Essex Property Trust, Qualys, Vulcan Materials
Factbox: Companies cutting jobs as investments shift toward AI