On October 21, 2026, attackers were already targeting websites with requests designed to exploit two critical PHP vulnerabilities known as PHP2Shell. The official security patches weren’t available yet, but our engineering and security teams were already working to protect Kinsta-hosted websites.
The response involved several moving parts. Our team enabled emergency Cloudflare firewall rules, adjusted PHP configurations, and prepared to deploy patches across hundreds of thousands of containers as soon as they became available. At the same time, our Support team was responding to an influx of questions from customers concerned about their websites.
By October 23, our Cloudflare protections
