Cloudflare's Matthew Prince says PHP2Shell exploit attempts on its network rose from thousands in the 10 hours before the disclosure to millions afterward (Matthew Prince/@eastdakota)
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Hackers are bombarding servers with millions of attempts to exploit critical PHP2Shell vulnerabilities, revealing that the attacks began four days before the flaws were publicly disclosed. Amazon reported that someone attempted to exploit PHP2Shell on October 17, four days before the patches were released. Cloudflare, a cloud computing company, has observed a surge in attacks targeting the two vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, since details began circulating earlier this week.
The company's CEO, Matthew Prince, stated that their systems detected thousands of exploitation attempts within the first 10 hours of the vulnerabilities being announced, which jumped to tens of thousands within 45 minutes, hundreds of thousands within two hours, and has since climbed into the millions.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
