Cloudflare has deployed emergency web application firewall rules after detecting early attacks targeting two critical PHP vulnerabilities, ahead of a scheduled security release on October 21, 2026.

Cloudflare says it is seeing early attempts to exploit two critical PHP vulnerabilities whose details surfaced before the PHP ...

Cloudflare rolled out a real time transaction detector that inspects requests and origin responses at the edge.

The PHP project shipped emergency security releases on Oct. 21 to close two critical remote code execution holes, ...

Have you ever come across the name Cloudflare when opening a website? Some may have learned about it from a verification ...

Two serious flaws in software that powers a large share of the web leaked ahead of their fix. Now attacks have reportedly started.

Cloudflare has deployed an automatic WAF (communication defense feature) for all plans in response to a PHP zero-day ...

AI uncovered critical PHP vulnerabilities, triggering a global scramble to protect websites. Here's why it could be a major ...

Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in a ...

New tool shows whether a website's host and firewall have addressed the critical PHP flaws, without giving site owners ...

PHP released versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on October 21, at roughly 13:35 UTC on Wednesday. The releases fix ...

PHP’s emergency release fixes the critical PHP2Shell flaws, but WordPress and other CMS sites can’t apply it on their own. Who is exposed, what the interim sett ...