Key facts
- Millions of exploit attempts targeted a critical PHP security vulnerability after its public disclosure.
- The FBI warned of remote code execution and potential compromise of sensitive data and networks.
- PHP powers an estimated 69% of websites with a known server-side programming language.
Cloudflare CEO Matthew Prince warned that millions of exploit attempts targeted a critical PHP security vulnerability following its public disclosure. In the 10 hours before the vulnerability was revealed, Cloudflare's network observed thousands of attempts, which have since escalated significantly. The FBI's Cyber Division issued a warning, stating that the vulnerabilities could allow malicious actors to execute code remotely, potentially compromising sensitive data and networks. As a precaution, multiple organizations and government agencies took their websites offline. PHP is a widely used server-side programming language, powering an estimated 69% of websites.