Cloudflare reported blocking millions of automated exploit attempts targeting websites globally within hours of a critical PHP vulnerability disclosure. The surge in malicious traffic comes on the heels of advance security notices warning of high-severity flaws carrying CVSS v4.0 scores of 9.2 in PHP infrastructure. Security telemetry indicates that threat actors rapidly weaponized the disclosed details to scan and attack vulnerable web servers at scale. Cloudflare’s automated web application firewall (WAF) successfully intercepted the vast majority of inbound probes, shielding unpatched sites from potential remote code execution. Cybersecurity experts are strongly urging web administrators worldwide to apply emergency patches immediately as exploitation attempts continue to escalate.

Full report : Cloudflare says it blocked millions of hacking attempts after the critical PHP vulnerability was disclosed.