Companies and governments across the globe scrambled to update systems on Thursday following the disclosure of critical vulnerabilities in the PHP programming language, a widely used web development software. Cybersecurity firm Aikido Security reported millions of hacking attempts after the flaws were revealed.

The urgency intensified as governments in Europe and other regions temporarily took websites offline as a precaution on Wednesday. These emergency shutdowns affected banking, airline, rail, tax, and government services in locations ranging from Tokyo to Helsinki, highlighting the extensive reliance on PHP and the challenges of rapidly securing systems against publicly known vulnerabilities.

Microsoft CEO Satya Nadella commented on the incident, stating, "It was a long day and a long night, I know for all the IT and security folks... I’ve not seen anything like this in a long, long time." He emphasized the importance of developing maintainable digital systems.

PHP developers issued emergency patches on Wednesday for vulnerabilities that had reportedly existed for years before being uncovered using artificial intelligence. Users were strongly advised to update their software immediately. "Details of these flaws became public before fixes were ready, and attacks have since been reported," said Madeline Lawrence, co-founder of Aikido Security. "So companies are racing to update against attackers who can use AI to exploit them. That’s the whole race."

As organizations implemented patches and suspended services, cloud services firm Cloudflare reported a significant surge in hacking attempts. Cloudflare CEO Matthew Prince noted that "thousands of attempts to exploit it" were observed in the 10 hours before the public announcement, escalating to hundreds of thousands within two hours post-announcement, and reaching millions subsequently.

International Response to PHP Flaws

In Japan, major entities such as Nomura, Mitsubishi UFJ Financial Group, ANA, and East Japan Railway announced temporary suspensions of some internet services. Tokio Marine Holdings, an insurer, also suspended the website of a group company. Japan's Ministry of Finance and Meteorological Agency partially halted online services for safety measures, and the National Tax Agency temporarily took its service offline.

These precautionary measures in Japan follow a trend of increasing cybersecurity concerns, with the country having recorded more cyber incidents in the first nine months of the year than in the entirety of the previous year, according to TrendAI data.

French telecommunications group Orange temporarily suspended access to certain PHP-based websites and applications across several subsidiaries. In China, Tencent Cloud urged customers to install updated PHP versions but did not call for widespread website shutdowns.

Finland’s state IT services provider Valtori continued installing security patches overnight and gradually lifted precautionary blocks after temporarily shutting down government public web services. Valtori Director General Hannu Naumanen stated, "Restoring services can take days or even weeks, as in addition to updates, the systems need to be carefully tested." Valtori confirmed that the outages were not a result of exploitation or cyber breaches and that they were unaware of any active exploitation of the flaws.

Several Asian governments initiated cybersecurity inspections related to the PHP vulnerabilities. China's industry ministry urged organizations to inspect systems and upgrade to secure PHP versions, also recommending enhanced monitoring and credential changes. South Korea elevated its private-sector cybersecurity alert level and activated emergency response measures due to heightened concerns over potential hacking attacks.