{
  "id": 16127084,
  "title": "CERT alert to restrict Internet access to critical, high-risk systems that cannot be updated",
  "url": "https://urgent.news/2026/10/23/cert-alert-to-restrict-internet-access-to-critical-high-risk-systems",
  "topic": "world",
  "section": "World",
  "published": "2026-10-23T00:00:49.000Z",
  "source": {
    "name": "The Island Sri Lanka",
    "slug": "the-island-sri-lanka",
    "url": "http://island.lk/cert-alert-to-restrict-internet-access-to-critical-high-risk-systems-that-cannot-be-updated/"
  },
  "original_language": "en",
  "account": "Sri Lanka's Computer Emergency Response Team (CERT) has issued a directive to limit internet access to essential systems that cannot be updated due to identified security vulnerabilities in the widely-used PHP software. The CERT statement highlights the severe risks associated with the vulnerabilities, including unauthorized system access, data theft, and functionality disruption.\n\nTo mitigate the risks, CERT advises organizations and website developers to identify all systems using PHP and verify their running versions. The team emphasizes the importance of immediately updating these systems and web applications according to proper procedures using the software patches released for the security flaws. Updates should be performed using the instructions provided on the official PHP website (https://www.php.net).\n\nFurthermore, CERT recommends checking system logs to monitor for any unusual activity and restricting internet access to critical, high-risk systems that cannot be updated.",
  "summary": "Sri Lanka CERT has requested public and private sector organisations, as well as website developers, to pay attention to security vulnerabilities identified in relation to the PHP software commonly used for developing websites and web applications. The text of CERT statement issued yesterday: “Due to the security vulnerabilities referenced by the identification codes CVE-2026-109618 and […]",
  "key_points": [],
  "editors_take": "Restricting internet access for unpatchable systems shifts the burden of security from software updates to network isolation, forcing organizations to prioritize containment when critical vulnerabilities cannot be immediately resolved.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}