CONNECT WITH US
Tech

Tech

Government websites in the EU and Canada taken offline over PHP vulnerability

Engadget logo

Published on

Add as a preferred source on Google
Government websites in the EU and Canada taken offline over PHP vulnerability

All websites using the common programming language should update to the latest security patch.

One of the two major issues impacting web security this morning has had a ripple effect. In the wake of an announcement from the PHP Foundation that it was issuing a security release to patch two critical vulnerabilities, several government websites in the EU and Canada were taken offline as a preventive measure.

Reuters reported that governments in the Netherlands, Denmark, France and Finland took down at least some websites as a preventive measure. Meanwhile Evan Solomon, Canada's Minister of Artificial Intelligence and Digital Innovation, posted on X about the decision to temporarily go offline, while seconding the call for any website operators using PHP to update as soon as possible.

PHP is a programming language for websites. It's used in several major web publishing services, including WordPress and Drupal. Earlier today, news broke that PHP's software had contained major vulnerabilities for years and they were only just uncovered thanks to AI tools being used by cybersecurity firms. Those flaws could allow a hacker to infiltrate a system running PHP, potentially taking control of it.

"All servers using any version of PHP released in the last 20 years will be vulnerable," said Tiffany Farriss, interim CEO of the ​Drupal Association. "This issue impacts the majority of the Internet."

Thus far, the main response from the US government is a missive from the Cybersecurity & Infrastructure Security Agency encouraging organizations to update to the new patch from the PHP Foundation.


Source link

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.