Global emergency patching efforts for critical PHP vulnerabilities entered their second day, with the situation remaining tense. Researchers warned that hacker attack attempts surged from thousands to millions around the time of the vulnerability's public disclosure, and the possibility of some systems being compromised cannot be ruled out. On Thursday, the UK confirmed over 30 government services remained offline, and telecom operator Orange also suspended access to some websites and applications. The previous day, dozens of countries and regions, including Austria, the Netherlands, Finland, and France, had taken similar measures, while several Japanese banks and airlines also interrupted some online services. Matthew Prince, CEO of cybersecurity firm Cloudflare, revealed that attack attempts soared to hundreds of thousands within two hours of the vulnerability's public disclosure, subsequently increasing to millions. Palo Alto Networks has identified over 22.6 million "exposed instances" containing the vulnerability. The Cybersecurity Threat and Vulnerability Information Sharing Platform of the Ministry of Industry and Information Technology issued an urgent alert, stating that PHP has two critical remote code execution vulnerabilities, allowing attackers to directly compromise target systems without any authentication. It recommended immediate investigation and upgrade to the latest secure version. The vulnerabilities were discovered by Wiz, an Alphabet-owned cybersecurity company, using multiple AI tools, and are estimated to have existed for over a decade.