Cloudflare has deployed emergency web application firewall rules after detecting early attacks targeting two critical PHP vulnerabilities, ahead of a scheduled security release on October 21, 2026.

Cloudflare says it is seeing early attempts to exploit two critical PHP vulnerabilities whose details surfaced before the PHP ...

Cloudflare rolled out a real time transaction detector that inspects requests and origin responses at the edge.

Cloudflare CEO Matthew Prince says other serious flaws are being patched after PHP2Shell drew millions of exploit attempts ...

The PHP project shipped emergency security releases on Oct. 21 to close two critical remote code execution holes, ...

PHP released emergency patches today fixing two critical remote code execution vulnerabilities rated CVSS v4.0 9.2, affecting every web server running PHP 5.4 or later — a population spanning an ...

Have you ever come across the name Cloudflare when opening a website? Some may have learned about it from a verification ...

PHP released fixes for two critical server flaws. Kraken's security chief warns operators to check routers and storage ...

AI uncovered critical PHP vulnerabilities, triggering a global scramble to protect websites. Here's why it could be a major ...

Two serious flaws in software that powers a large share of the web leaked ahead of their fix. Now attacks have reportedly started.

Cloudflare has deployed an automatic WAF (communication defense feature) for all plans in response to a PHP zero-day ...

Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in a ...