Millions of abuse attempts after disclosure of PHP vulnerabilities

Cloudflare's CEO reported a surge in cyberattack attempts following the disclosure of vulnerabilities in PHP, with millions of attempts recorded. The National Cyber Security Centre confirmed no data breaches have occurred yet. Cloudflare had previously warned about potential attacks, urging prompt installation of security updates, which many Dutch websites managed to implement. The vulnerabilities, discovered using AI, were known since 2024 but details leaked, prompting an early patch release. While the situation in the Netherlands appears resolved, the NSA warns that affected organizations abroad should take their systems offline until a fix is applied, as many struggle to implement the update.