Critical security vulnerability in PHP programming language triggers urgent global update
A critical security vulnerability discovered in the PHP programming language, dubbed 'php2shell', has forced institutions worldwide to update their systems. Although no successful cyber attack has been confirmed yet, many countries and organizations have temporarily taken their services offline as a precautionary measure.
Severe security vulnerabilities detected in the PHP programming language, which forms the infrastructure of approximately 70 percent of websites worldwide, have sparked a widespread update mobilization in the tech world. While experts state that unpatched systems face the risk of remote code execution, many international institutions and organizations, including the UK government, have temporarily closed some of their digital services to access as a security precaution.
The critical vulnerabilities announced by PHP developers came to light following warnings from cybersecurity firm Wiz. Cloudflare reported a major surge in exploitation attempts targeting systems following the announcement of the security flaw. UK Technology Minister Baroness Lloyd of Effra announced that 32 services in the UK were taken offline as a precaution, but no breaches had occurred in critical public-facing services.
National Cyber Security Centre (NCSC) Technology Director Olly Whitehouse described the situation as 'unprecedented', while emphasizing that there is no evidence so far of a successful cyber attack taking place. Organizations such as the Finnish government, the Dutch cybersecurity agency, parts of Wikipedia, and France-based Orange experienced brief service outages in order to apply security patches.
Sources
- bbc.com · Link