Hacking Attempts Surge as Companies and Governments Rush to Patch PHP Flaws

Companies and governments worldwide are racing to secure their systems after critical vulnerabilities in PHP triggered a sharp rise in hacking attempts. The flaws could allow attackers to execute malicious code on vulnerable servers, potentially exposing sensitive information and disrupting online services.

PHP is a widely used programming language that powers a significant share of websites and web applications. The security concerns have prompted urgent warnings from cybersecurity agencies, while some organisations have temporarily taken services offline to reduce the risk of attacks.

Millions of Exploitation Attempts Reported

Cloudflare reported a rapid increase in attempts to exploit the vulnerabilities after details became public. According to its chief executive, Matthew Prince, activity rose from thousands of attempts before disclosure to tens of thousands within 45 minutes, hundreds of thousands within two hours and eventually millions.

Amazon Web Services also reported attempts to exploit the flaws before the fixes were released. Security researchers have warned that attackers can study publicly available patch details to develop methods for targeting systems that have not yet been updated.

However, attempted exploitation does not necessarily mean that every attack succeeded or that affected organisations suffered a breach.

Governments and Businesses Take Precautionary Measures

The vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, were flagged as critical because they could enable remote code execution without authentication on affected systems.

Organisations in several countries have responded by reviewing exposed systems, strengthening monitoring and applying security updates. Some government services and business platforms were temporarily suspended while protective measures and testing were carried out.

Authorities in China and South Korea also issued warnings, urging organisations to inspect their infrastructure, install the latest secure PHP versions and improve cybersecurity monitoring.

Artificial Intelligence Helped Identify the Flaws

The vulnerabilities drew attention after researchers used artificial intelligence tools to help analyse long-standing weaknesses in the software and demonstrate how they could be exploited.

The episode highlights AI's growing role in cybersecurity. Such tools can help defenders identify and fix weaknesses, but they can also make it easier for malicious actors to analyse software and develop attacks more quickly.

Security experts say the shrinking time between public disclosure and active exploitation makes it increasingly important for organisations to respond quickly to critical software alerts.

What Organisations Should Do Next

Cybersecurity agencies are urging organisations to identify all systems that rely on affected PHP versions, prioritise internet-facing servers and install the relevant security updates immediately.

Where patching cannot be completed promptly, authorities recommend considering temporary isolation of vulnerable systems from public networks. Businesses should also review logs for suspicious activity, monitor third-party software that may bundle PHP and rotate credentials or security keys when an investigation indicates this is necessary.

The incident serves as a reminder that even widely used, established software can contain serious vulnerabilities. For organisations dependent on online services, rapid patching, continuous monitoring and a clear incident-response plan are essential to reducing the risk of disruption or compromise.

More News:-