UK urges 'immediate action' on PHP security issue

 The United Kingdom National Cyber Security Center (NCSC) has called on organizations across the country to take immediate action and update their PHP versions on Wednesday to mitigate a security issue affecting the web development language, warning that the vulnerabilities could expose systems to significant cybersecurity risks.

The PHP security update, scheduled for today, is intended to address two critical vulnerabilities in the widely used open-source scripting language for web development that can be found in WordPress and Drupal. The flaws could have let attackers remotely execute malicious code on vulnerable servers without authentication, prompting agencies and governments worldwide to take their websites offline as a precaution.

The Dutch National Cyber Security Center was among the agencies that took their websites down, while the website of the country's lower house of parliament, the Tweede Kamer, was also inaccessible. Japan and the European Union issued similar cybersecurity warnings, while Finland temporarily took government web services offline as a precaution.

https://breakingthenews.net/Article/UK-urges-'immediate-action'-on-PHP-security-issue/67366929