Millions of Hacking Attempts Target Websites Worldwide After Critical PHP Security Flaws
A major cybersecurity warning has put website owners and developers around the world on high alert. On October 22, 2026, reports described millions of attempts to exploit newly disclosed critical vulnerabilities in PHP, a programming language widely used to build websites and web applications. According to reports, Cloudflare observed exploitation attempts increase dramatically after the…
A critical security flaw in PHP, a widely-used programming language for building websites and web applications, has led to millions of hacking attempts worldwide. The vulnerabilities, identified as php2shell, can allow attackers to execute commands remotely on vulnerable servers, potentially compromising sensitive files, server resources, and website operations.
The incident has prompted several government organizations and businesses to temporarily take websites offline for assessment and security updates. Cloudflare observed a dramatic increase in exploitation attempts after the vulnerabilities became public, highlighting the potential impact of a single vulnerability in widely-used software.
Website owners are advised to verify their own environments to ensure they are protected against the latest security threats.
Brief written by urgent.news from Dev.to's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
Also reported by 2 other outlets
- Millions of Hacking Attempts as Companies, Governments Rush to Patch PHP Flaws insurancejournal.com
- PHP flaws trigger surge in hacking attempts worldwide techinasia.com
