Governments and commercial websites in multiple countries urgently taken offline due to critical PHP vulnerability
On October 21, PHP released an emergency patch to address a critical vulnerability that had lain dormant for over a decade. Government websites in multiple countries, including the Netherlands, Denmark, Finland, and France, were proactively taken offline, while platforms like Wikipedia also temporarily disabled some systems. Cybersecurity agencies in Europe, Australia, Japan, and the UK urged users to update immediately or take their websites offline as a precaution.
Governments and commercial websites across multiple countries urgently take systems offline due to critical PHP vulnerability
On October 21, PHP released an emergency patch to address a critical vulnerability that had lain dormant for over a decade. To mitigate risks, government websites in the Netherlands, Denmark, Finland, France, and other countries proactively went offline. Several other sites, including Wikipedia, also temporarily shut down parts of their systems.
As PHP powers approximately 75% of identifiable websites, cybersecurity agencies in Europe, Australia, Japan, and the UK have all urged users to update immediately or take their websites offline as a precaution.
Source: Reuters (Original article)
Editor's note: What a busy night! The security risks involve the PHP, Node.js, Nginx (including njs), Go, Rust ecosystems, and LiteLLM, encompassing remote code execution, memory safety issues, certificate validation bypasses, file path traversal operations, and supply chain poisoning.
While others stay up late binge-watching shows, operations teams stay up late chasing CVEs!
