On 21 October, two critical flaws in PHP, the language behind roughly 70 per cent of websites, leaked before the fix was ready. Several governments pulled sites offline, and Cloudflare logged exploitation attempts climbing into the millions.