CNBC_ Security, governmental, and technical authorities have warned of critical cyber vulnerabilities in the PHP programming language, which is widely used in websites and corporate systems, prompting a number of entities to take urgent precautionary measures to protect their digital infrastructure.
The Cybersecurity Division of the U.S. National Security Agency advised all organizations utilizing PHP to prepare immediately for applying a security update that addresses two critical security vulnerabilities, emphasizing that if implementing the update immediately is not feasible, systems must be temporarily disconnected from the network until the vulnerabilities are fully resolved.
The Division clarified that the agency will issue more detailed directives later regarding the mechanisms for handling the vulnerabilities and the required procedures to mitigate potential risks.
The Belgian Ministry of Foreign Affairs temporarily suspended its websites following reports of cyberattacks exploiting a vulnerability in PHP, while affirming that the Belgian Center for Cybersecurity has not recorded any attacks targeting Belgian websites thus far.
The German Ministry of Digital Affairs announced that the ITZBund agency, the central IT service provider for the federal administration, suspended a number of websites as a precautionary measure in light of the security vulnerabilities in PHP, explaining that no security incidents have been recorded at the present time.
OpenAI considered that the severity of these vulnerabilities and the widespread use of PHP make them among the most impactful vulnerabilities in recent times.
The company added that the Frontier AI initiative discovered these vulnerabilities before attackers could find them, noting the allocation of one billion dollars to support the accessibility of technologies via the Daybreak program for frontline defenders.
The Interim CEO of the Drupal Association noted that the maintainers of PHP have issued the necessary updates, but the associated software packages are not yet available, pointing out that the issue affects a large portion of the internet.
Japanese Prime Minister Sanae Takaichi urged users and organizations to verify whether their websites rely on PHP and to prepare to apply security updates and patches as soon as they become available.
These simultaneous warnings and precautionary measures across several countries reflect the growing concern over the implications of these vulnerabilities, given the widespread prevalence of PHP and the reliance of a large number of government entities and companies on it to operate their websites and digital services.
