The NSA has warned over two critical PHP security flaws that could put websites worldwide at risk, telling organizations to take affected systems offline if they cannot be secured immediately.
Belgium’s foreign ministry temporarily pulled its websites following reports of cyberattacks exploiting the PHP vulnerability. The Centre for Cybersecurity Belgium has recorded no attacks on Belgian websites.
Japan PM Takaichi urged checking whether sites use PHP and applying the fix patch.
CISA: no observed exploitation, but the flaws pose a risk to unpatched organizations.
