Global companies and governments moved quickly to patch critical PHP vulnerabilities after cloud firms reported a surge in hacking attempts. Emergency shutdowns affected banking, airline, rail, tax and government services from Tokyo to Helsinki, according to Insurance Journal. The flaws, present in PHP for years and found using AI, prompted developers to urge immediate updates.
Cloudflare and Amazon reported millions of hacking attempts after details of the flaws became public. Some Japanese firms, including Tokio Marine Holdings and Mitsubishi UFJ Financial Group, suspended online services as a precaution. France’s Orange and China’s Tencent Cloud also took steps to protect PHP-based systems. Finland’s Valtori said restoring services could take days or weeks, with no evidence of breaches so far.
The incident shows the deep reliance on ageing programming tools and the challenge of maintaining secure systems as complexity grows. Regulators and industry groups in Asia and Europe advised urgent updates, security reviews and enhanced monitoring. Smaller organisations face extra risk if they run outdated PHP versions without available security fixes.
Senior leaders in regulated sectors should review patch management processes and ensure that software dependencies are monitored and updated. The speed and scale of attempted exploits show the need for rapid response and regular system audits.
