Matthew Prince from Cloudflare pointed out that the network recorded thousands of hacking attempts even prior to the official public disclosure of the PHP security flaw.

Matthew Prince, Chief Executive Officer of Cloudflare, cautioned that the platform encountered millions of breach attempts following the public revelation of two severe PHP vulnerabilities.
During the ten-hour window before the flaws were made public, the infrastructure detected thousands of attacks, which have presently escalated to “millions,” according to Prince’s statement in a Thursday post on X.
Cloudflare functions as a web infrastructure organization that accelerates website delivery and defends them against cyber threats. Based on data from the company, roughly twenty percent of all sites globally direct their internet traffic via its platform.
The PHP Foundation conceded on Wednesday that resource limitations postponed a patch for a critical software bug first discovered back in 2024. PHP developers launched emergency updates addressing two severe vulnerabilities on that exact day.
These security gaps could enable malicious actors to distribute malware or insert harmful scripts into web pages worldwide. Research organization W3Techs indicates that PHP accounts for roughly 69% of websites utilizing a known server-side programming language.
The FBI Cyber Division issued a warning in a Wednesday post on X, stating that the pair of critical flaws may “permit malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks,” and strongly advised enterprises to apply updates immediately or disconnect vulnerable systems.
As a precautionary step, various businesses and government entities temporarily took their web portals offline on Wednesday.
Related: Drift exploiter sends $109M in Ether to Tornado Cash in 2 days
Originally published at https://cointelegraph.com/news/cloudflare-millions-exploit-attempts-php-vulnerability-disclosure?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound.