It's been relentless' say IT workers on frontline of PHP cyber security scramble
Microsoft boss Satya Nadella says he has not seen anything like the PHP emergency .
Microsoft boss Satya Nadella says he has not seen anything like the PHP emergency "in a long, long time".
Referencing the ongoing global efforts to fix the critical cyber-security flaw in millions of websites, he told a conference "it was a long day and a long night, I know, for all the IT and security folks".
But two critical flaws were found with the system that led to the emergency response, with national cyber-security authorities urging IT teams to download a security fix urgently or take websites and servers offline.
In spite of warnings from Cloudflare and AWS that "millions of hacking attempts" had been made every hour, there is also no evidence of large scale data breaches or cyber-attacks.
Mudd says since then he has been under enormous pressure and has lost a huge amount of sleep - working early and not finishing until 22:30 BST to secure his customers' systems.
He said he had never had so many messages from people who were worried about their websites.
He said there was a risk of "alert fatigue" which could be a big problem if a fully exploitable and serious vulnerability arose.
He said part of the problem was the announcement about the security vulnerabilities in PHP came as a surprise, without much time to prepare for action.
He agreed that on paper the PHP vulnerabilities were very serious and should be taken seriously, but he and many others are frustrated with the misinformation about hackers being on the loose.
But some in the industry are concerned about how people were told about the critical vulnerabilities in PHP, as they fear improvements in AI will throw up more incidents like it.
What happened
Microsoft boss Satya Nadella says he has not seen anything like the PHP emergency "in a long, long time".
Referencing the ongoing global efforts to fix the critical cyber-security flaw in millions of websites, he told a conference "it was a long day and a long night, I know, for all the IT and security folks".
What changed
But two critical flaws were found with the system that led to the emergency response, with national cyber-security authorities urging IT teams to download a security fix urgently or take websites and servers offline.
In spite of warnings from Cloudflare and AWS that "millions of hacking attempts" had been made every hour, there is also no evidence of large scale data breaches or cyber-attacks.
Who is affected
Mudd says since then he has been under enormous pressure and has lost a huge amount of sleep - working early and not finishing until 22:30 BST to secure his customers' systems.
He said he had never had so many messages from people who were worried about their websites.
Why it matters
He said there was a risk of "alert fatigue" which could be a big problem if a fully exploitable and serious vulnerability arose.
Technical details
He said part of the problem was the announcement about the security vulnerabilities in PHP came as a surprise, without much time to prepare for action.
He agreed that on paper the PHP vulnerabilities were very serious and should be taken seriously, but he and many others are frustrated with the misinformation about hackers being on the loose.
But some in the industry are concerned about how people were told about the critical vulnerabilities in PHP, as they fear improvements in AI will throw up more incidents like it.
Response
Jones said it felt like "the race was on" when the patch launched at 15:00 BST on Wednesday.
Attribution
BBC News: Microsoft boss Satya Nadella says he has not seen anything like the PHP emergency "in a long, long time".
What to watch next
Watch for updated vendor guidance and fixed-version details.