TokyoPHP exploit attempts went from thousands to millions in hours.
Banks, airlines, railways and tax agencies from Tokyo to Helsinki suspended services as a precaution.
The flaws lurked for years until AI uncovered them, and details became public before fixes were ready, Aikido Security’s Madeline Lawrence said.
“They may run a website using PHP but don’t really keep a close eye on it,” said Bitkom’s Felix Kuhlenkamp.
Finland’s state technology provider says restoring services can take days or even weeks after patching.
Sources: Daily Maverick