Millions of Cyberattack Attempts Target Websites as Critical PHP Flaws Threaten Crypto Platforms

Hackers made millions of attempts to exploit two critical flaws in PHP, the programming language behind much of the web, after its developers released fixes on Wednesday, according to Cloudflare. “In the 10 hours before it was publicly announced, across the network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now,” Cloudflare chief executive Matthew Prince wrote on X late on Wednesday. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, carry a severity score of 9.2 out of 10.