CONNECT WITH US
Social Media

Social Media

Cyber chiefs tell websites to make critical safety update or go offline

BBC News – Social Media logo

Published on

Add as a preferred source on Google
Cyber chiefs tell websites to make critical safety update or go offline

Organisations which rely on the PHP programming language are being told they should install a significant software update today - or consider taking their websites offline.

Two critical vulnerabilities with PHP, which is widely used across the internet, have been identified.

The PHP Foundation, which supports it, is issuing updates which address them on Wednesday afternoon.

The UK's National Cyber Security Centre (NCSC), as well as its counterparts in the EU and Australia have urged those who use PHP to apply the fixes as soon as they become available.

The Netherlands' cyber-security agency says it is taking its own website offline due to the vulnerabilities identified.

"Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated," the NCSC said in a note.

"PHP is everywhere. It ​quietly powers WordPress, Drupal, Joomla, and Magento sites, shared hosting platforms, control panels, and an awful ⁠lot of software that doesn't even advertise that it runs PHP under the hood," cybersecurity company Huntress said.

The European Union Computer Emergency Response Team (CERT-EU) said the risk scores given to the vulnerabilities "indicate the potential for unauthenticated remote code execution".

Such a cyber-attack could potentially allow hackers to install malware and take down websites.

Dane Knecht, chief technology officer at internet infrastructure firm Cloudflare, said he was "seeing early attacks emerging and are updating mitigations as new vectors show up".

The NCSC said once organisations have installed the update, they should "continuously monitor for security updates from third-party software vendors, including for appliances and services that may bundle PHP".


Source link
Related Topics:Social Media

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.