Environment
Major government websites across Europe have been temporarily taken offline due to a serious cybersecurity threat involving software vulnerabilities.
Major government websites across Europe have been temporarily taken offline due to a serious cybersecurity threat involving software vulnerabilities. According to a report by Reuters, critical vulnerabilities discovered in the PHP programming language have prompted government and private websites across Europe and other parts of the world to temporarily shut down. Cybersecurity agencies have urged users to update their software immediately or keep their websites offline until security patches become available.
Government agencies in the Netherlands and Finland, along with several other organizations, have taken their websites offline to protect against potential cyberattacks. The Dutch National Cyber Security Centre also temporarily shut down its website as a precautionary measure. PHP developers identified the vulnerabilities on Tuesday and instructed users to update their websites as soon as fixes became available. At approximately 1345 GMT on Wednesday, developers confirmed that a new version addressing the vulnerabilities had been released. However, reports emerged that hackers were attempting to exploit the flaws to gain unauthorized access to websites, prompting operators worldwide to implement immediate security measures.
Cybersecurity experts say the threat is particularly serious because PHP is one of the most widely used programming languages worldwide. According to web technology tracker W3Techs, PHP is used by approximately 75 percent of websites whose server-side programming language is known. PHP underpins numerous websites and online services, including popular platforms such as WordPress, Drupal, Joomla and Magento. WordPress alone powers approximately 43 percent of all websites worldwide, ranging from personal blogs and business websites to government portals, online stores and news websites. Cybersecurity firm Hunters has warned that PHP quietly powers a substantial portion of the internet, and many software users may not even realize that PHP operates behind the scenes in their systems.
Dan Knecht, chief technology officer at cloud and web security company Cloudflare, said initial attempts to exploit the security vulnerabilities had begun to emerge. In response, the company modified its firewall rules as a precautionary measure. However, experts say these measures are temporary, and the definitive solution is to install the latest secure version of PHP.
