Cloudflare's Matthew Prince says PHP flaw drew millions of exploit attempts

Key points

• Matthew Prince said Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure, now "millions"
• The PHP Foundation said a resource shortage delayed a fix for a flaw first identified in 2024
• The FBI's Cyber Division urged organisations to update immediately or take affected systems offline

Cloudflare's Matthew Prince says the PHP flaw drew millions of exploit attempts after two critical vulnerabilities were publicly revealed, according to Cointelegraph. In a Thursday post on X, the chief executive said the network had already logged thousands of attempts in the 10 hours before disclosure.

Cloudflare is an internet infrastructure company that speeds up websites and shields them from cyberattacks, and about one in five sites worldwide routes traffic through its network, the company says.

The FBI's Cyber Division warned on Wednesday that the flaws could let malicious actors run code remotely in the PHP core, potentially compromising sensitive data and networks. It urged organisations to update at once or take affected systems offline. Several organisations and government agencies took websites down on Wednesday as a precaution.

Read the full story on Cointelegraph →