A serious security vulnerability has been found in the PHP programming language, prompting warnings from cybersecurity experts and an urgent response internationally and in Iceland, Vísir reports. A substantial share of the world’s websites rely on PHP, heightening concerns about potential risks from the flaw.
Guðmundur Arnar Sigmundsson, head of cybersecurity and data development at Advania, said people and companies using websites built on PHP should update those sites soon, according to mbl.is. The vulnerability was described as very severe on Wednesday. Two emergency updates have been released to address the issue.
Vísir reported that information about the vulnerability was leaked before the release of emergency updates. It is not yet known which specific institutions or companies have taken their websites offline or temporarily disabled services as a result. Details about which systems or PHP versions are affected have not been disclosed.
Background
Advania is a Northern European information technology services provider headquartered in Stockholm, Sweden. The company operates in Sweden, Iceland, Norway, Finland, Denmark, Ireland, and the United Kingdom, with international talent hubs in several other countries. Advania was formed in January 2012 and is majority-owned by Goldman Sachs.
Sources
Links: tilkynningu á vefsíðu sinni
- Vísir (first reported) in Icelandic
- mbl.is in Icelandic
