PHP Cyber-Security Flaw Triggers Global System Updates
Organizations worldwide and UK government services scramble to update systems after critical security vulnerabilities were discovered in PHP.
Stock photo for illustration only, not from the actual event
- Critical security vulnerabilities discovered in the widely-used PHP programming language
- UK government temporarily takes 32 online services offline as a precaution
- Cloudflare reports exploitation attempts surging to millions after disclosure
- Experts confirm no successful breaches have been reported so far
Organizations and businesses around the globe are frantically scrambling to update their computer systems following the disclosure of critical security flaws in PHP, a foundational programming language used in web development for decades.
Websites worldwide were taken offline on Wednesday and Thursday after PHP developers confirmed that severe vulnerabilities were found in the back-end language. Researchers warned that unpatched systems could expose millions of websites to potential hacks.
Baroness Lloyd of Effra, tech minister, told the House of Lords that 32 government services were unavailable and four were partially unavailable, attributing the downtime largely to precautionary measures implemented while security updates and mitigations were applied.
Stock photo for illustration only, not from the actual event
Olly Whitehouse, chief technology officer of the National Cyber Security Centre (NCSC), described the event as unprecedented while confirming there were no indications of any successful breaches by hackers.
"The information I have is that 32 Government services are unavailable and four are partially unavailable"
Baroness Lloyd of Effra
PHP (Hypertext Preprocessor) was developed in the early 1990s to support dynamic web pages and applications, remaining a core technology behind major platforms such as WordPress, Wikipedia, and various e-commerce sites today. Because these security flaws are inherent to the programming language itself, the incident highlights the systemic risks facing global internet infrastructure and the critical need for rapid coordinated patching.
Matthew Prince, CEO of internet infrastructure firm Cloudflare, revealed that the company observed thousands of attempts to exploit the vulnerabilities before public announcement, with that figure escalating to millions of attempts shortly afterward. Amazon similarly reported observing hacking attempts while confirming their websites continued to operate normally.
Source: BBC World
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment