Hacking attempts surge worldwide as governments and companies race to patch critical PHP vulnerabilities

Governments, banks and major corporations around the world are scrambling to secure their digital infrastructure after the discovery of critical vulnerabilities in PHP, one of the internet’s most widely used programming languages. Cybersecurity company Cloudflare has reported millions of attempted attacks following the disclosure, while authorities have temporarily suspended online services to prevent potential breaches.

Millions of attacks detected within hours Cloudflare chief executive Matthew Prince revealed that attempts to exploit the vulnerabilities accelerated dramatically after their public disclosure on Wednesday, 21 October.

The company detected thousands of attempts before the announcement, followed by tens of thousands within 45 minutes. Within two hours, the number had reached hundreds of thousands, subsequently increasing into the millions.

The figures represent attempted exploitation rather than confirmed successful intrusions, but demonstrate how rapidly cybercriminals respond when serious software weaknesses become public.

Banks and government services disrupted The emergency has affected organisations across Europe and Asia.

In Japan, financial institutions including Mitsubishi UFJ Financial Group and Nomura temporarily suspended certain online services. All Nippon Airways and East Japan Railway also introduced precautionary restrictions.

Japan’s Finance Ministry suspended parts of its online operations, while Prime Minister Sanae Takaichi urged website operators to identify vulnerable systems and install the necessary updates.

Government services in Finland and other European countries experienced similar interruptions as administrators worked to protect their infrastructure.

Artificial intelligence uncovers longstanding flaws The vulnerabilities had reportedly remained undetected in PHP for years before being identified through artificial intelligence-assisted security analysis.

PHP supports a substantial proportion of the world’s websites, including platforms used for electronic commerce, banking, public administration and content management.

Its developers released emergency security updates on Wednesday, urging users to install the fixes immediately.

However, cybersecurity specialists warned that older systems and complex institutional networks could require considerably more time to update safely.

Growing concern over financial infrastructure The incident has exposed the dependence of modern financial services on software components shared across thousands of otherwise unrelated systems.

Banks, payment providers and fintech companies increasingly rely on interconnected platforms, making vulnerabilities in commonly used programming languages a potentially systemic operational risk.

Successful exploitation could allow attackers to compromise servers, access sensitive information or interrupt essential online services.

Microsoft chief executive Satya Nadella described the response as an extraordinary challenge for technology and security teams.

Security experts warn of continuing risks Cybersecurity authorities across several countries have issued warnings and encouraged organisations to review their exposure.

Security specialists expect attempts to exploit unpatched systems to continue, particularly where outdated software remains in operation.

The crisis highlights an uncomfortable reality for the global digital economy: even established and widely trusted technologies can contain serious vulnerabilities for years, with potentially far-reaching consequences when those weaknesses are finally discovered.

NewsHub Finance | Technology & Cybersecurity | 23 October 2026