{
  "id": 16143082,
  "title": "Singapore warns of critical PHP vulnerabilities that could expose web servers to hackers",
  "url": "https://urgent.news/2026/10/23/singapore-warns-of-critical-php-vulnerabilities-that-could-expose-web",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-23T02:52:13.000Z",
  "source": {
    "name": "Malay Mail",
    "slug": "malay-mail-malaymail",
    "url": "https://www.malaymail.com/news/singapore/2026/10/23/singapore-warns-of-critical-php-vulnerabilities-that-could-expose-web-servers-to-hackers/240275"
  },
  "original_language": "en",
  "account": "The Cyber Security Agency of Singapore has issued a warning about critical vulnerabilities in PHP, a widely-used technology powering websites and online services. Chief Executive Gwenda Fong stated that the two vulnerabilities discovered in PHP are concerning, as cyber attackers could potentially exploit affected systems without requiring login credentials, leading to unauthorized access, data theft, or service disruption. These security flaws, dubbed \"PHP2Shell,\" have been demonstrated and security patches released on October 21. Fong emphasized that Singapore organizations must prioritize identifying and patching vulnerable systems to prevent exploitation by cybercriminals. The agency is collaborating with government agencies, critical information infrastructure owners, major enterprises, and industry partners to expedite patching efforts. Smaller organizations are also being encouraged to take action through business associations, cybersecurity service providers, and technology partners. To mitigate the risk, organizations are advised to identify systems running any version of PHP and apply the security updates, with particular focus on internet-facing systems. Additionally, they should check if PHP is installed on their web servers, including any third-party applications or components that may inadvertently use the technology, even if their primary website does not utilize PHP.",
  "summary": "SINGAPORE, Oct 23 — The Cyber Security Agency of Singapore (CSA) urged organisations to promptly act against...",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 4,
    "also_reported_by": [
      {
        "outlet": "Channel News Asia",
        "title": "Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat",
        "url": "https://urgent.news/2026/10/22/singapore-organisations-urged-to-patch-critical-php-flaws-immediately",
        "published": "2026-10-22T09:33:00.000Z"
      },
      {
        "outlet": "The Business Times - Singapore",
        "title": "Firms here should ‘act now’ to fix critical PHP vulnerabilities: Singapore’s cybersecurity chief",
        "url": "https://urgent.news/2026/10/22/firms-here-should-act-now-to-fix-critical-php-vulnerabilities",
        "published": "2026-10-22T13:16:55.000Z"
      },
      {
        "outlet": "Qatar Tribune Business",
        "title": "Global cybersecurity effort intensifies after discovery of critical PHP flaws",
        "url": "https://urgent.news/2026/10/22/global-cybersecurity-effort-intensifies-after-discovery-of-critical",
        "published": "2026-10-22T21:28:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}