Websites taken down across Europe ahead of critical cyber-security update

Websites across Europe have gone offline in preparation for a critical software update to the PHP programming language, which powers many online services. The update addresses two significant vulnerabilities in PHP, a widely-used language that underpins platforms such as WordPress, Drupal, Joomla, and Magento. Major organizations, including the Finnish government, Edinburgh council, BBC, the Netherlands National Institute for Public Health and the Environment, and the UK's National Cyber Security Centre (NCSC), have taken action to protect their online assets.

PHP, a behind-the-scenes scripting language, enables the functionality users see when visiting websites. Security experts warn that the vulnerabilities could allow hackers to install malware and take down websites. The NCSC advises organizations to either apply the updates immediately or take their systems offline until the issue is fully mitigated. Finding and managing every instance where PHP is running is a complex task, given the language's pervasive use in various software and platforms.

The European Union Computer Emergency Response Team (CERT-EU) has highlighted the risk scores for the vulnerabilities, indicating the potential for unauthenticated remote code execution. This could enable hackers to install malware and take control of websites. Internet infrastructure firm Cloudflare is observing early attacks emerging and is updating mitigations as new vectors appear.

The NCSC recommends continuous monitoring for security updates from third-party software vendors, including appliances and services that may bundle PHP.

The exact versions of PHP affected by the vulnerabilities are yet to be confirmed, but CERT-EU suggests that all versions dating back to PHP 5 onwards could be vulnerable. This update is a crucial step in maintaining the security and stability of the internet, as malicious actors continue to evolve their tactics.