The PHP security vulnerability on Tuesday, October 20, caused many government websites in various countries, including France, the Netherlands, and Belgium, to go offline. The Paris police website and the Dutch parliament announced that they had taken their sites offline due to this security warning.
PHP and Its Importance on the Web
The PHP programming language is the foundation of many internet sites. From simple blogs to large news portals and online stores, all use PHP as their base system. IT experts estimate that the "WordPress" software, which is entirely based on PHP, is used to manage around 400 to 500 million websites worldwide. In addition to WordPress, other content management systems like Moodle, Joomla, and Typo3 are also built on PHP.
Read more: Tesla on the verge of transformation; flying roadster and economic challenges
Risks from the Security Vulnerability
The PHP security team announced on Tuesday that security updates will be released on Wednesday, October 21, at 14:00 UTC, and website administrators have been asked to prepare for the installation of these updates. In Germany, the Federal Office for Information Security (BSI) also issued an official cybersecurity warning and declared an orange alert for this vulnerability. This warning indicates the necessity of swift actions to prevent widespread disruptions in activities.
The Deputy Head of the Information Security Office in Germany stated in an interview with a national network that these security updates could allow attackers to organize their attacks. They can target websites that have not yet been updated by analyzing these updates.
The potential danger of these vulnerabilities is very high, as criminals can implement malicious codes on compromised servers without the need for authentication. This action allows attackers to gain complete control over websites and access sensitive information and customer data.
Fortunately, no major damages have been reported so far, and this security vulnerability was quickly identified by two companies, leading to a security update warning. However, those who have not performed this update remain at risk and may soon be attacked.
The Heise Security website, which operates in the field of cybersecurity, has recommended that to mitigate risk, PHP-based web servers should be isolated from the network and the internet until the security update is installed. Additionally, older versions of PHP that are no longer supported can also pose serious risks and should either be isolated or updated immediately.
Many institutions and organizations have temporarily taken their online services offline due to this security vulnerability. University websites, government offices, and clinics have also temporarily taken their sites offline following this warning.
Currently, there is no specific threat to the normal browsing of users, as this vulnerability exists only on backup servers and infrastructures. However, end users may be indirectly affected, especially through disruptions or outages of important online services.
PHP language developers and hosting service providers are continuously working to address these vulnerabilities and maintain internet security.
Read more: Minister of Communications explains about the early exhaustion of internet packages · AI infiltration into the Australian healthcare system and criticisms from Anthony Albanese
