🚨 ONE PHP LEAK HIT 5 COUNTRIES AND THE EU IN ONE DAY. HERE'S WHAT HAPPENED TO EACH:
🇯🇵 Japan — Uma Musume and Shadowverse games DOWN for emergency maintenance before the 23:00 patch
🇯🇵 Japan — BASE online shops, Sakura and X Server hosting all in EMERGENCY maintenance
🇯🇵 Japan — Codmon, the nursery app, SUSPENDED for emergency maintenance
🇯🇵 Japan — national cyber office demanded action "as quickly as possible"
🇯🇵 Japan — Tokyo police cyber unit WARNED every PHP site to be ready for the 23:00 fix
🇺🇸 USA — Cloudflare CTO: "We are seeing early attacks emerging"
🇺🇸 USA — Cloudflare: MASSIVE stopgap firewall rollout, free customers included
🇺🇸 USA — EVERY WordPress site exposed (the LARGEST site builder in the entire world, 40%+ of the internet)
🇺🇸 USA — the fix CAN'T install by automatic update (Wordfence)
🇪🇺 EU — CERT-EU: if you can't patch, CUT apps off public networks
🇬🇧 UK — NCSC gave the same advice: patch or go OFFLINE
🇦🇺 Australia — ASD ALERT: "prepare to update and apply patches"
🇵🇱 Poland — CERT Polska: ALL versions from PHP 5.0 up
AFTERMATH:
2 critical flaws leaked before the fix, CVSS 9.2 out of 10 on both
Every PHP site at risk (69.3% of websites run on PHP)
1,300,000+ internet-exposed hosts likely vulnerable
Games, shops and hosting suspended across Japan in ONE DAY
Mass attacks expected within 15 minutes of the patch
One Hacker News post triggered this a day before the fix.
The leak made sure everyone around PHP paid the price.
This is not a one-country crisis.
This is the beginning of something much bigger.