跟进：PHP严重漏洞披露后数小时利用尝试达数百万次 欧洲多国政府网站一度下线 三菱UFJ暂停部分网络服务

据路透社 10 月 22 日报道，广泛使用的网站编程语言 PHP 被披露存在严重漏洞后，针对该漏洞的利用尝试在数小时内从零星试探滚成了百万量级。云服务商 Cloudflare 首席执行官 Matthew Prince 周三晚在社交平台 X 上发帖说：「在公开宣布前的 10 小时里，我们在整个网络上看到了数千次利用尝试。这个数字在公告发布后 45 分钟内跃升至数万次，2 小时内达到数十万次，现在已经达到数百万次。」

冲击很快越出技术圈。漏洞披露后，欧洲及其他地区的多个政府网站周三一度下线，全球网站运营者纷纷忙着给自己的系统打补丁。其中，荷兰议会与荷兰国家网络安全中心已预防性下线相关系统，本站此前已报道。在日本，三菱 UFJ 金融集团表示，已因采取应急措施暂时暂停部分互联网服务；日本财务省也暂停了部分网站内容与服务。日本首相高市早苗周三敦促网站所有者检查自己的网站是否使用 PHP，并为应用新的修复做好准备。

PHP 的开发团队周三发布了紧急修复版本。路透社称，这批漏洞在软件中潜伏了多年，直到被人工智能技术发现才暴露出来；开发团队表示，鼓励所有用户「立即更新」。由于 PHP 支撑着全球大量网站的运行，这一漏洞的处置进度仍在牵动各国政府与金融机构的神经。

Exploit Attempts Reach Millions Within Hours of PHP Flaw Disclosure; Government Websites Go Offline in Europe and MUFG Suspends Some Online Services

Exploit attempts against a critical vulnerability in PHP, the widely used web programming language, surged from a trickle to millions within hours of the flaw's public disclosure, Reuters reported on October 22. Matthew Prince, chief executive of cloud services firm Cloudflare, said in a post on X late on Wednesday: "In the 10 hours before it was publicly announced, across the network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now."

The fallout quickly spread beyond the technology sector. Government websites in Europe and elsewhere went offline on Wednesday after the disclosure sent website operators around the world scrambling to protect their systems. In the Netherlands, parliament and the National Cyber Security Centre took systems offline as a precaution, as GSM reported earlier. In Japan, Mitsubishi UFJ Financial Group said it was temporarily suspending some internet services due to emergency measures, and the Finance Ministry also suspended some website content and services while security measures were implemented. Prime Minister Sanae Takaichi on Wednesday urged website owners to check whether their sites use PHP and prepare to apply the new fix.

PHP's developers released urgent fixes on Wednesday. Reuters said the vulnerabilities had been lurking in the software for years until they were uncovered using artificial intelligence, and that all users were "encouraged to update immediately." Because PHP powers a large share of the world's websites, the pace of patching remains a focus for governments and financial institutions.

来源：GSM·美国（原文链接）

图片来源：Wikimedia Commons · NOIRLab/NSF/AURA/T. Slovinský · CC BY 4.0

本频道最新更多 ›

参议员 Marsha Blackburn 要求 Meta 撤回商业条款更新：称其授权抓取商家与创作者网站内容2026-10-23MiniMax宣布开源M3.1 Flash模型权重：428B参数、72小时处理Token超100万亿2026-10-23

← 返回科技　全部新闻　关于我们