Cyber chiefs tell websites to make critical safety update or go offline
Source: BBC ·
Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.
From the source
Organisations which rely on the PHP programming language are being told they should install a significant software update today - or consider taking their websites offline. Two critical vulnerabilities with PHP, which is widely used across the internet, have been identified. The PHP Foundation, which supports it, is issuing updates which address them on Wednesday afternoon. The UK's National Cyber Security Centre (NCSC), as well as its counterparts in the EU and Australia have urged those who use PHP to apply the fixes as soon as they become available. "Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated," the NCSC said in a note , external . EU cyber-security officials have issued a similar warning , external . "PHP is everywhere. It quietly powers WordPress, Drupal, Joomla, and Magento sites, shared hosting platforms, control panels, and an awful lot of software that doesn't even advertise that it…