EU agency warns websites may need to be taken offline as PHP prepares patches for vulnerabilities
- On Wednesday, multiple Dutch government websites including MijnOverheid, DigiD, and the Dutch parliament went offline as a precautionary measure following discovery of critical PHP vulnerabilities.
- The European Union Computer Emergency Response Team warned on Tuesday that flaws rated 9.2 on the CVSS scale allow unauthenticated remote code execution, enabling attackers to inject malicious code without logging in.
- Cybersecurity firm Huntress noted that PHP powers WordPress, Drupal, Joomla, and Magento sites. Cloudflare CTO Dane Knecht said the firm is "seeing early attacks emerging" and updating firewall rules as protection.
- Developers announced patches for both vulnerabilities on Wednesday, while The Australian Cyber Security Centre advised organizations to identify affected PHP systems and prepare for immediate updates.
- Web hosting provider GoDaddy cautioned that unpatched flaws could lead to data theft or full system compromise. Security plugin Wordfence warned that automatic updates will not apply the fix, requiring manual intervention.
77 Articles
77 Articles
Dutch parliament website taken offline as cybersecurity warning triggers precautions
The website of the Tweede Kamer, the lower house of Dutch parliament, has been temporarily taken offline as a precautionary measure following the discovery of vulnerabilities in PHP, the programming language used to build websites. A spokesperson confirmed the move when asked about it. Many other Dutch sites have also been taken down. “These vulnerabilities affect websites worldwide and make it possible to remotely control a server,” the spokesp…
CRITICAL PHP FLAWS PROMPT EU CYBER AGENCY TO WARN SITES MAY NEED TO GO OFFLINE AS PATCHES LOOM
European cybersecurity officials are warning that organizations unable to apply forthcoming patches for two critical PHP vulnerabilities may need to take affected websites offline, as developers prepare fixes for the widely used programming language.
EU cybersecurity team says unpatched PHP sites may need to go offline
Organisations that cannot quickly patch two critical flaws in PHP should consider taking their websites offline, the EU’s cybersecurity response team has warned. PHP powers a large share of the web. The PHP project will release fixes at 14:00 UTC on Wednesday, October 21. CERT-EU, which protects the EU’s institutions and bodies, issued the advice […] This story continues at The Next Web
Coverage Details
Bias Distribution
- 41% of the sources are Center, 40% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
