Cloudflare首席执行官马修·普林斯表示，自周三相关细节公开以来，Cloudflare已记录到数百万次利用两个严重PHP漏洞的攻击尝试。这些漏洞影响PHP，这是一种支撑互联网大部分内容的编程语言。
Cloudflare has recorded millions of attempts to exploit two critical PHP vulnerabilities since details became public on Wednesday, according to CEO Matthew Prince. The flaws affect PHP, a programming language used to power much of the web.
普林斯周三晚在X上公布了这些数据。在漏洞披露前的10个小时内，Cloudflare已发现数千次漏洞利用尝试。
Prince shared the figures on X late Wednesday. Cloudflare had seen thousands of exploit attempts in the 10 hours before the vulnerabilities were disclosed.
在公告发布后的45分钟内，这一数字升至数万次，两小时内达到数十万次，到他发帖时已达到数百万次。
That rose to tens of thousands within 45 minutes of the announcement, hundreds of thousands within two hours, and millions by the time he posted.
这两个漏洞被命名为PHP2Shell，允许攻击者在无需登录的情况下在Web服务器上执行代码。
The vulnerabilities, dubbed PHP2Shell, allow attackers to execute code on a web server without logging in.
PHP将这两个漏洞的严重程度评为9.2分（满分10分），并于周三为8.2至8.5版本发布了紧急补丁，比原计划提前了一天，此前技术细节已在网上泄露。
PHP rated both flaws 9.2 out of 10 for severity and released emergency patches for versions 8.2 through 8.5 on Wednesday, a day ahead of schedule after technical details leaked online.
安全公司Calif和Wiz以及OpenAI均表示，AI工具帮助识别了这些漏洞。PHP已敦促用户立即安装更新。
Security firms Calif and Wiz, along with OpenAI, have said AI tools helped identify the vulnerabilities. PHP has urged users to install the updates immediately.
在漏洞公开披露前约九小时，Cloudflare已为所有客户启用了防火墙规则，包括免费套餐用户。
Cloudflare enabled firewall rules for all customers, including those on free plans, about nine hours before the flaws were publicly disclosed.
该公司警告称，这些规则仅提供临时保护，并不能免除更新PHP本身的必要性。
The company has warned that the rules offer only temporary protection and do not remove the need to update PHP itself.
这些漏洞还促使世界各地的组织在安装补丁期间将网站和在线服务下线。
The vulnerabilities have also prompted organisations around the world to take websites and online services offline while applying patches.
周三，在欧盟网络安全局（CERT-EU）警告未打补丁的网站可能需要下线以降低攻击风险后，多个欧洲政府网站陷入瘫痪。
Several European government websites went dark on Wednesday after CERT-EU warned that unpatched sites might need to be taken offline to reduce the risk of attacks.
据路透社报道，在日本，三菱日联金融集团作为预防措施暂时中止了部分互联网服务。财务省也在实施安全措施期间暂停了部分网站内容和服务。
In Japan, Mitsubishi UFJ Financial Group temporarily suspended some internet services as a precaution, Reuters reported. The Finance Ministry also halted some website content and services while implementing security measures.
路透社称，首相高市早苗敦促网站运营者检查其网站是否使用PHP，并做好应用修复程序的准备。
Prime Minister Sanae Takaichi urged website operators to check whether their sites use PHP and prepare to apply the fixes, Reuters said.
运行 PHP 8.2 之前版本的运营商面临额外挑战：这些版本不再获得官方支持。他们可能需要依赖软件供应商或托管服务商提供补丁，从而使其在保障过时系统安全方面选择更少。1:28 pm UTC
Operators running PHP versions older than 8.2 face an additional challenge: those releases no longer receive official support. They may need to rely on their software vendors or hosting providers for patches, leaving them with fewer options for securing outdated systems. 1:28 pm UTC