Cloudflare blocked millions of php2shell attacks and made its new WAF free

Cloudflare says it blocked millions of automated php2shell exploitation attempts and rolled out a new WAF that inspects both the HTTP request and the matching origin response. The full transaction detection features are enabled by default for all customers, including free accounts.

• Exploitation attempts jumped from thousands to millions within 45 minutes
• New WAF correlates HTTP requests with origin responses to spot attacks
• Protections are on by default across all Cloudflare tiers
• Experts urge patching PHP repositories via hosting providers