{"id":2210083,"date":"2026-10-21T12:09:22","date_gmt":"2026-10-21T09:09:22","guid":{"rendered":"https:\/\/analyse.optim.biz\/?p=2210083"},"modified":"2026-10-21T12:09:22","modified_gmt":"2026-10-21T09:09:22","slug":"install-critical-php-safety-update-or-go-offline-cyber-chiefs-tell-websites","status":"publish","type":"post","link":"https:\/\/analyse.optim.biz\/?p=2210083","title":{"rendered":"Install critical PHP safety update or go offline, cyber chiefs tell websites"},"content":{"rendered":"

[analyse_image type=”featured” src=”https:\/\/ichef.bbci.co.uk\/news\/1024\/branded_news\/eb5e\/live\/02351720-cd44-11f1-8177-0f8bd59b54c4.jpg”]<\/p>\n

\n
\n
\n
\n
\n
\"GettyGetty Images<\/span><\/div>\n<\/div>\n<\/figure>\n<\/div>\n<\/div>\n
\n
\n
\n
\n

Organisations which rely on the PHP programming language are being told they should install a significant software update today – or consider taking their websites offline.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

Two critical vulnerabilities with PHP, which is widely used across the internet, have been identified.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

The PHP Foundation, which supports it, is issuing updates which address them on Wednesday afternoon.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

The UK’s National Cyber Security Centre (NCSC), as well as its counterparts in the EU and Australia have urged those who use PHP to apply the fixes as soon as they become available.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

The Netherlands’ cyber-security agency says it is taking its own website offline due to the vulnerabilities identified.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

The country’s National Institute for Public Health and the Environment, an agency of the Dutch government, has taken down its website.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

Similarly the website of the Tweede Kamer, the lower house of the nation’s parliament, has become inaccessible.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

“Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated,” the NCSC said in a note.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

EU cyber-security officials have issued a similar warning.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

“PHP is everywhere. It \u200bquietly powers WordPress, Drupal, Joomla, and Magento sites, shared hosting platforms, control panels, and an awful \u2060lot of software that doesn’t even advertise that it runs PHP under the hood,” cybersecurity company Huntress said.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

The European Union Computer Emergency Response Team (CERT-EU) said the risk scores given to the vulnerabilities “indicate the potential for unauthenticated remote code execution”.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

Such a cyber-attack could potentially allow hackers to install malware and take down websites.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

Dane Knecht, chief technology officer at internet infrastructure firm Cloudflare, said he was “seeing early attacks emerging and are updating mitigations as new vectors show up”.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

The NCSC said once organisations have installed the update, they should “continuously monitor for security updates from third-party software vendors, including for appliances and services that may bundle PHP”.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

It is not yet clear which versions of the programming language are affected, but CERT-EU said it could affect all versions of it dating back to PHP 5 onwards – which launched in 2004.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

PHP was created for web development. It is used on servers to implement what you see when you visit websites.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

Not all websites use it, but it nonetheless powers a large portion of the internet.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n
\"A<\/div>\n<\/div>\n<\/figure>\n<\/div>\n<\/div>\n
\n
\n
\n
\n

Sign up for our Tech Decoded newsletter to follow the world’s top tech stories and trends. Outside the UK? Sign up here.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n

[analyse_source url=”https:\/\/www.bbc.com\/news\/articles\/cmly0lg3w5x2o”]<\/p>\n","protected":false},"excerpt":{"rendered":"

[analyse_image type=”featured” src=”https:\/\/ichef.bbci.co.uk\/news\/1024\/branded_news\/eb5e\/live\/02351720-cd44-11f1-8177-0f8bd59b54c4.jpg”] Getty Images Organisations which rely on the PHP programming language are being told they should install a significant software update today – or consider taking their websites offline. Two critical vulnerabilities with PHP, which is widely used across the internet, have been identified. The PHP Foundation, which supports it, is issuing updates […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[35,226],"class_list":["post-2210083","post","type-post","status-publish","format-standard","hentry","category-politics","tag-bbc-com","tag-crawlmanager"],"_links":{"self":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/posts\/2210083","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2210083"}],"version-history":[{"count":0,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/posts\/2210083\/revisions"}],"wp:attachment":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2210083"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2210083"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2210083"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}