Cybersecurity alarm in Turkey following critical vulnerability in PHP infrastructure
National-scale scans have been initiated in Turkey due to critical security vulnerabilities identified in the PHP software infrastructure, dubbed PHP2Shell. The Presidency's Directorate of Cybersecurity warned public institutions to take urgent measures.
Turkey has taken action following critical security vulnerabilities discovered in the PHP infrastructure, which is used worldwide in websites and enterprise applications. The Presidency's Directorate of Cybersecurity initiated nationwide security scans against vulnerabilities defined as "PHP2Shell" that carry the risk of remote code execution.
The Directorate of Cybersecurity sent urgent notifications to public institutions and critical infrastructure operators via the Cyber Incident Response Teams (SOME) Communication Platform. Institutions were asked to review their internet-facing IT systems, apply security updates immediately, and restrict unnecessary external access.
Assessment: It is assessed that this vulnerability, dubbed PHP2Shell, allows attackers to execute remote code without authentication, posing serious risks to data security and service continuity.
Due to this vulnerability affecting worldwide systems as well, US agencies FBI and NSA recommended that systems be updated or temporarily taken offline. Similar security measures were taken in countries such as Japan, Denmark, Norway, Finland, the Netherlands, France, Germany, and Belgium, with some public websites temporarily closed to access as a precaution.
Sources
- mansethaber.com · Link