{
    "success": true,
    "data": {
        "id": 2052614,
        "msgid": "millions-of-cyberattacks-hit-websites-worldwide-within-hours-1792767035",
        "date": "2026-10-23 20:40:00",
        "title": "Millions of Cyberattacks Hit Websites Worldwide Within Hours",
        "author": "",
        "source": "CNBC",
        "tags": "",
        "topic": "Technology",
        "summary": "Cloudflare recorded a rapid surge in attempts to exploit two critical PHP vulnerabilities, reaching millions within hours of their public disclosure. The flaws could allow unauthorised commands to be run on PHP servers, prompting emergency patches and urgent calls from cybersecurity authorities and governments for organisations to update their systems.",
        "content": "<p>Jakarta, CNBC Indonesia \u2013 The attacks targeted a security flaw known\nas PHP2Shell. Cloudflare\u2019s records show that exploitation attempts\nreached millions.<\/p>\n<p>\u201cDuring the 10 hours before it was announced publicly, we saw\nthousands of attempts to exploit it across the Cloudflare network. That\nrose to tens of thousands in the 45 minutes after the announcement,\nhundreds of thousands in two hours, and millions by now,\u201d Cloudflare\nchief executive Matthew Prince said in a post on his official\naccount.<\/p>\n<p>The UK\u2019s National Cyber Security Centre (NCSC) said two\nvulnerabilities, CVE-2026-109618 and CVE-2026-109619, could allow\nattackers to run their own commands on PHP-based servers without logging\nin. It described them as among the most serious types of security\nflaw.<\/p>\n<p>The agency added that attackers could cause PHP memory to become\noverloaded, potentially using the resulting disruption to take control\nof a server.<\/p>\n<p>Wikipedia was among the sites affected. The Wikimedia Foundation,\nwhich operates the site, confirmed disruption caused by the PHP\nvulnerabilities.<\/p>\n<p>Wikimedia is also working to address the flaws in PHP, which is used\nby most wikis. \u201cThis issue affects all known versions of PHP; it is not\nspecific to the Wikimedia Foundation,\u201d the organisation said in a\nstatement, as quoted by Mashable on Friday (22 October 2026).<\/p>\n<p>The PHP Foundation, which supports the programming language, released\nemergency security updates last Wednesday to fix the two critical\nvulnerabilities.<\/p>\n<p>The NCSC, Japan\u2019s Prime Minister and the US National Security Agency\nhave urged organisations to install the newly released patches as soon\nas possible.<\/p>\n<p>PHP is a programming language that runs on web servers. It operates\nbehind the scenes, retrieving data from databases and building pages\nbefore they reach a user\u2019s browser when a web page is loaded.<\/p>",
        "url": "https:\/\/jawawa.id\/newsitem\/millions-of-cyberattacks-hit-websites-worldwide-within-hours-1792767035",
        "image": ""
    },
    "sponsor": "Okusi Associates",
    "sponsor_url": "https:\/\/okusiassociates.com"
}