National Cyber Security Centre issues warning about serious vulnerability
The National Cyber Security Centre (NCSC) has issued a warning about a serious vulnerability in PHP, a technology that powers up to 70% of websites worldwide. If left unpatched, it could allow cyber criminals to gain unauthorised access to your website’s server.
Our Partner Citation is sharing guidance from their sister brand Citation Cyber, on what to do now:
• Identify where PHP is running, starting with internet-facing systems including websites and web applications.
• Update to the latest fixed version, or ask your hosting provider or web developer to confirm they have.
• If you can’t update straight away, apply the PHP team’s temporary mitigations or take the system offline.
Read the full NCSC guidance (https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php) or Citation Cyber’s explainer (https://citationcyber.com/blogs/php2shell-php-vulnerability/?utm_source=partner&utm_medium=wmca&utm_campaign=partner_mailmerger_phpupdate_2310)
Share
















