Cloudflare saw thousands of exploit attempts on PHP bug before it was public, millions in 24 hours after; PHP Foundation admits it sat on the flaw since 2024 due to lack of resources

Cloudflare saw thousands of exploit attempts on the PHP bug before it was even public, then millions in the 24 hours after. The PHP Foundation admits it sat on the flaw, first spotted in 2024, because it ran short of resources.

Detected & updated continuously · Source: Nebula