Live · updated 1 minute ago · 137 stories in 24h

← Stream
Hacks & Security Unverified First seen

Cloudflare CEO reports millions of PHP exploit attempts tied to PHP2Shell flaw

Cloudflare CEO Matthew Prince said the network saw millions of exploit attempts against a PHP vulnerability, including thousands before public disclosure, according to Cointelegraph and The Defiant. The Defiant reported that PHP has shipped fixes for four supported branches and that the flaws can let attackers run code on vulnerable web servers without logging in.

Why “Unverified”

  • 2 independent sources (The Defiant, Cointelegraph), but no primary confirmation

2 independent source groups across 2 posts · evidence score 75/100. How labels work

Other reports on this event

Its sources described the event in different words, so it was kept as a separate story with its own label. How reports are linked

What the sources claim

  1. Cloudflare's CEO reported millions of exploit attempts against the PHP flaw.

    “Cloudflare CEO Reports Millions of PHP2Shell Exploit Attempts”
    The Defiant
  2. PHP has released fixes for four supported branches.

    “PHP has shipped fixes for four supported branches.”
    The Defiant
  3. The flaws allow attackers to run code on vulnerable web servers without logging in.

    “The flaws can let attackers run code on vulnerable web servers without logging in.”
    The Defiant
  4. Cloudflare's Matthew Prince said the network saw thousands of exploit attempts before the PHP vulnerability was publicly disclosed.

    “saw thousands of exploit attempts even before the PHP vulnerability was publicly disclosed”
    Cointelegraph

Sources

More in Hacks & Security

All Hacks & Security stories →

Summary and claims extracted by AI with prompt analyze-story@5 on 2026-10-22 09:20 UTC. Labels are computed from the sources, not by the model.