Critical vulnerabilities can lead to attacks on websites
Two critical vulnerabilities have been discovered in PHP, a programming language used in many websites and web-based services. The National Cyber Security Centre in Sweden is urging organisations to take urgent action.
Published:
If the security flaws are not addressed promptly, there is a risk that attackers could gain access to affected systems and carry out malicious activities, according to the National Cyber Security Centre (NCSC).
Following the discovery of these critical vulnerabilities, security updates have been released today to address the issue.
Recommendations for organisations
The National Cyber Security Centre has issued recommendations aimed at businesses and organisations (i.e. not at private individuals).
The NCSC recommends that organisations investigate which of their systems use the programming language in question (PHP). They should also install the security updates now available as a matter of urgency. Organisations are also advised to check for any signs of intrusion or suspicious activity within their systems.