PHP exploit attempts went from thousands to millions in hours.

Banks, airlines, railways and tax agencies from Tokyo to Helsinki suspended services as a precaution.

The flaws lurked for years until AI uncovered them, and details became public before fixes were ready, Aikido Security’s Madeline Lawrence said.

“They may run a website using PHP but don’t really keep a close eye on it,” said Bitkom’s Felix Kuhlenkamp.

Finland’s state technology provider says restoring services can take days or even weeks after patching.

Sources: Daily Maverick