Governments take websites offline as urgent PHP security flaw spreads
Governments are taking websites offline in response to a critical PHP security flaw.
PHP is a programming language that powers many of the world's websites, handling user logins, online shopping and databases. A critical flaw lets hackers break in and take over sites by sending a crafted request.
The Australian Signals Directorate and America's Cyber Defence Agency have warned developers. Authorities from the UK, Europe and Japan warned them too.
All said to apply emergency patches right away. Multiple European governments and the Port of Rotterdam have shut down websites to be safe.
Patches are now available. It will take time to put them on millions of systems worldwide.
This leaves web infrastructure exposed during the wait.
- 1997
- PHP in use since
- August
- Discovery month
Why it mattersUntil patched, the flaw leaves websites at risk of compromise. Personal data, financial information and business operations could be stolen or disrupted.
AustraliaAustralian government agencies have sounded the alarm. Australian web infrastructure and users could face data theft if websites are not patched quickly.
Corroborated bytheconversation.com
✓ Claims checked against the source and corrected before publish. checked 2 h ago
