Cybersecurity Stocks Gain, Cloudflare Surges Over 6% As Severe PHP Vulnerability Takes Websites Offline in Multiple European Countries

TradingKey - Two severe security vulnerabilities were exposed in the PHP programming language, prompting multiple European government and public institution websites to go offline preventively on Wednesday. As website operators rushed to patch systems, demand for cybersecurity protection has come into focus.

Impacted by this, cybersecurity and related software stocks rallied across the board. As of press time, Datadog (DDOG) rose 7.55%, Okta (OKTA) jumped 7.51%, Zscaler (ZS) gained 7.39%, Cloudflare (NET) climbed 6.71%, and CrowdStrike (CRWD) added 6.29%.

PHP Vulnerability Spreads to Multiple European Nations, Government and Public Agency Websites Urgently Taken Offline

According to CNBC, the PHP development team announced on Tuesday the discovery of two critical security vulnerabilities, urging users to update immediately once patched versions were released. The team stated around 13:45 GMT on Wednesday that new versions containing the fixes were live.

However, prior to the release of the patches, amid reports of hackers exploiting the vulnerabilities to breach websites, some government agencies in countries including the Netherlands and Finland took preventive measures by shutting down websites. The Dutch government portal Overheid.nl, the Port of Rotterdam, the Dutch Football Association, the country's five major political parties, and several hospital websites were temporarily closed, while the Dutch cybersecurity agency itself also went offline as a precaution.

Behind the widespread impact of this incident lies the reliance of a vast number of websites on a single underlying software.

PHP reportedly powers website platforms such as WordPress, Drupal, Joomla, and Magento. According to data from web technology survey firm W3Techs, among websites whose server-side programming language can be identified, approximately 75% use PHP; WordPress, which runs on PHP, powers about 43% of websites globally, spanning government portals, corporate websites, e-commerce platforms, and news media.

Cloudflare Upgrades Firewall, Fixes Still Take Time After Patch Release

In response to emerging attacks, Cloudflare has taken emergency measures. Dane Knecht, the company's chief technology officer, stated that early attacks have been observed, and the company is updating firewall rules while adjusting defenses as new attack vectors emerge. He also emphasized that these measures are only temporary stopgaps, and website operators still need to install the PHP patch as soon as possible.

Wordfence, a provider of WordPress security plugins, warned that automatic website updates will not handle this PHP fix, and operators need to confirm who is responsible for updating the PHP environment on their servers. For small websites that lack technical staff and rely on shared hosting services, the fix may take longer, leaving them exposed to risk even after the patch has been released.

Cybersecurity agencies in Europe, Australia, Japan, and the United Kingdom have urged relevant users to update immediately or temporarily shut down their websites until the patch can be installed. Lukasz Olejnik, a visiting senior research fellow at King's College London, also noted that AI-assisted attacks could accelerate vulnerability exploitation, further broadening the scale of the attacks.