The National Cyber Security Centre (NCSC) has issued a warning about a serious vulnerability in PHP, a technology that powers up to 70% of websites worldwide. If left unpatched, it could allow cyber criminals to gain unauthorised access to your website’s server.
Our Innovator Member Citation is sharing guidance from their sister brand Citation Cyber, on what to do now:
· Identify where PHP is running, starting with internet-facing systems including websites and web applications.
· Update to the latest fixed version, or ask your hosting provider or web developer to confirm they have.
· If you can’t update straight away, apply the PHP team’s temporary mitigations or take the system offline.
Want the detail? Read the full NCSC guidance or Citation Cyber’s explainer https://tinyurl.com/pcyvzjhb
Not sure what’s exposed? Citation Cyber’s Cyber Protect includes external vulnerability scanning to help you find and prioritise fixes. Find out more about Cyber Protect – https://tinyurl.com/nae5ejhj
