Two critical PHP flaws lead France and the Netherlands to take websites offline
Two critical flaws in the PHP programming language led government entities in several countries to take websites offline as a preventive measure. The NSA asked to immediately update systems running PHP or disconnect vulnerable ones. The PHP project released a security update on Wednesday. France disconnected local government portals, including the Paris Police Prefecture site, and the Netherlands took down services such as DigiD and the House of Representatives website.
In 40 seconds
- The NSA warned the PHP flaws can ease access to server files and databases and, under certain conditions, allow server takeover without a password.
- The PHP project released a security update on Wednesday and the PHP Foundation recommended installing it as soon as possible.
- The flaws were reported in August by Calif and OpenAI, and Wiz found other ways to exploit them; details leaked on Tuesday.
IASummary generated by artificial intelligence from a story by RTVC Noticias. It may contain errors: the original source prevails.




Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.