EU and Canadian Government Websites Taken Offline Over Critical PHP Vulnerabilities
EU, Canadian government sites went offline as a precaution after PHP patched two critical vulnerabilities.
Reuters reported that the Netherlands, Denmark, France and Finland took down at least some government websites as a preventive measure. In Canada, Evan Solomon, the minister of artificial intelligence and digital innovation, posted on X about the decision to go temporarily offline and repeated the call for any website operator using PHP to update as soon as possible.
PHP is used in major web publishing services including WordPress and Drupal. Earlier on Oct. 21, news broke that PHP software had contained major vulnerabilities for years and that they were only just uncovered with AI tools used by cybersecurity firms, according to Engadget. The flaws could allow a hacker to infiltrate a system running PHP and potentially take control of it. Engadget reported that all websites using the language should update to the latest security patch.
“All servers using any version of PHP released in the last 20 years will be vulnerable,” Tiffany Farriss, interim CEO of the Drupal Association, said, according to Engadget. “This issue impacts the majority of the Internet.”
The main U.S. government response so far has been a message from the Cybersecurity & Infrastructure Security Agency encouraging organizations to update to the new patch from the PHP Foundation. The White House told Reuters it was made aware of the issue on Friday.