Cloudflare CEO: PHP vulnerability drew millions of exploit attempts

The detail that matters here is timing: exploitation began before public disclosure, which narrows the window in which defenders can react and suggests the flaw was known to some attackers first. That shifts the burden toward faster patching and stronger network-level filtering rather than disclosure-day scrambles. Cloudflare's vantage point across many networks makes the volume figure a useful signal of how aggressively such bugs are probed. Whether this level of pre-disclosure activity is an outlier or the new baseline is the open question.