PHP released vulnerability fixes for several versions, including 8.5.12, on Wednesday to address the previously discovered PHP2Shell vulnerability. Cloudflare CEO Matthew Prince stated that their network has monitored millions of attack attempts exploiting this vulnerability. However, Thomas Caspers, Vice President of the German Federal Office for Information Security (BSI), and Minoru Kihara, Chief Cabinet Secretary of Japan, both stated that no websites have been confirmed to be successfully compromised due to this vulnerability. The PHP Foundation admitted that the delay in fixing was a structural failure caused by the security team's decision-making process and insufficient resources, and stated that its security team will make decisions by majority vote rather than consensus in the future. The UK's National Cyber Security Centre (NCSC) advised organizations unable to patch immediately to consider taking systems offline. Binance founder Changpeng Zhao reminded users to be extra careful when visiting websites in the coming days.