Software security: PHP vulnerability: Many websites are accessible again
The PHP vulnerability has been patched, but that doesn't mean the danger has passed: Hackers may have already installed themselves before the update. What matters when searching for traces.
The situation regarding severe security vulnerabilities in the widely used programming language PHP has largely stabilized for website operators in Germany. Nearly all websites that were taken offline as a precaution, including ministries, authorities, and medical institutions like Berlin's Charité, have been restored after security updates were installed.
Despite the swift response from administrators, experts warn that it's too early to consider the issue resolved, as around 70% of all websites worldwide use PHP, making the risk of successful manipulation high. The Federal Office for Information Technology Security (BSI) and the Digital Ministry report no successful attacks on the federal administration or regulated economy so far, but experts stress that this doesn't guarantee the absence of damage.
Experts recommend that administrators and users take certain steps, including reviewing log data and updating security measures.
Written by urgent.news from Handelsblatt's report — not a translation of it. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
