Hong Kong watchdog warns of hacking risks from flaws in web programming language

A Hong Kong information security watchdog has issued an "extremely high risk" warning regarding two critical flaws in the widely used web programming language PHP. These vulnerabilities could allow hackers to remotely execute code and take control of server systems. The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) advises organizations to install the patches immediately, with an option to isolate internet-facing applications if patching is not feasible.

The South China Morning Post has reached out to the Hong Kong government's Digital Policy Office to inquire about their response. The PHP development team has urged users to update the language immediately, with the flaws rated at a severity of 9.2 out of 10. Popular platforms such as WordPress, e-commerce websites, and enterprise portals rely heavily on PHP, potentially exposing them to security threats.

Both US and UK cybersecurity agencies have strongly urged organizations to patch the vulnerabilities, with the FBI's Cyber Division recommending taking systems offline if immediate updates are not possible.