Published 1 hour ago • loading... • Updated 3 hours ago
Some Government Websites Still Down in Response to Security Risk
Officials said the move protects government systems and Canadians’ information after experts found two critical PHP flaws that could allow remote code execution.
Artificial Intelligence Minister Evan Solomon said Ottawa temporarily took some federal websites offline to protect government systems from an identified security risk in PHP.
Governments and corporations are applying urgent security updates after the AI-assisted discovery of vulnerabilities in PHP, a programming language vital to 70 per cent of websites globally.
The United States "Federal Bureau of Investigation" cyber division warned the vulnerability could allow malicious actors to remotely execute code, potentially compromising sensitive data and networks.
There is no indication that federal systems have been compromised, the chief information officer's office said, with work underway to restore access as quickly as possible.
The PHP Foundation released fixes for the vulnerabilities, while experts urge organizations to install security updates as soon as possible to prevent potential exploitation.