{
  "id": 16008873,
  "title": "Hong Kong watchdog warns of hacking risks from flaws in web programming language",
  "url": "https://urgent.news/2026/10/22/hong-kong-watchdog-warns-of-hacking-risks-from-flaws-in-web",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-22T06:37:01.000Z",
  "source": {
    "name": "South China Morning Post - Hong Kong",
    "slug": "south-china-morning-post-hong-kong",
    "url": "https://www.scmp.com/news/hong-kong/article/3371756/hong-kong-watchdog-warns-hacking-risks-flaws-web-programming-language"
  },
  "original_language": "en",
  "account": "A Hong Kong information security watchdog has issued an \"extremely high risk\" warning regarding two critical flaws in the widely used web programming language PHP. These vulnerabilities could allow hackers to remotely execute code and take control of server systems. The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) advises organizations to install the patches immediately, with an option to isolate internet-facing applications if patching is not feasible. The South China Morning Post has reached out to the Hong Kong government's Digital Policy Office to inquire about their response. The PHP development team has urged users to update the language immediately, with the flaws rated at a severity of 9.2 out of 10. Popular platforms such as WordPress, e-commerce websites, and enterprise portals rely heavily on PHP, potentially exposing them to security threats. Both US and UK cybersecurity agencies have strongly urged organizations to patch the vulnerabilities, with the FBI's Cyber Division recommending taking systems offline if immediate updates are not possible.",
  "summary": "A Hong Kong information security watchdog issued an “extremely high risk” warning on Thursday morning over two critical flaws in a widely used web programming language that could allow hackers to execute code remotely and take control of servers. The warning followed similar alerts from governments and cybersecurity agencies overseas, which urged website operators to install updates to fix the…",
  "key_points": [
    "Hong Kong watchdog issues extreme risk warning on PHP vulnerabilities",
    "Two critical flaws could enable remote code execution and server takeover",
    "HKCERT advises immediate patching or isolating internet-facing applications"
  ],
  "editors_take": "The critical vulnerabilities in PHP force organizations to choose between immediate patching or complete isolation to prevent remote attackers from seizing control of widely used enterprise and e-commerce platforms.",
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "South China Morning Post",
        "title": "Hong Kong watchdog warns of hacking risks from flaws in web programming language",
        "url": "https://urgent.news/2026/10/22/hong-kong-watchdog-warns-of-hacking-risks-from-flaws-in-web-16010585",
        "published": "2026-10-22T06:37:01.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}