Critical PHP Security Flaws Prompt Urgent Offline Warnings for Website Operators
Cybersecurity authorities urge organizations to patch critical PHP vulnerabilities immediately or take websites offline to prevent hacker exploitation.
POLICY WIRE — London, UK — Cybersecurity officials are issuing urgent directives to organizations worldwide, advising them to either apply emergency patches to the PHP programming language or proactively take their websites offline.
The warning follows the discovery of two critical security vulnerabilities within PHP, a foundational server-side language that powers a vast portion of the internet. Developers announced on Wednesday, October 21, that they are preparing necessary fixes to address these significant flaws.
The UK’s National Cyber Security Centre (NCSC) has joined EU and Australian authorities in sounding the alarm. Officials emphasize that if an organization cannot immediately implement the required software updates, shutting down affected web services is the only way to mitigate the risk of exploitation by malicious actors.
Reporting by Policy-Wire (PW)
