Critical vulnerabilities in commonly used web code spark rush to update systems
Crucial vulnerabilities in a programming language that underpins much of the internet is so severe that European and British authorities have recommended websites temporarily go offline until it can be fixed.
Read more Evacuations and shelter-in-place orders issued in Toledo, Ohio, after chemical release
Several websites were temporarily down as of Wednesday morning, citing fear that hackers could take them over. Those include Pinboard, a bookmarking site, and some parts of Wikipedia.
The Japanese tech news site ITmedia reported that Japanese sites are also voluntarily offline, including systems for daycare centers and video games.
The flaws are in the PHP language, which powers how web servers process code.
The security team that maintains PHP announced Wednesday that it would release patches to fix the problem at 10 a.m. ET.
“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” it said.
FOR SUBSCRIBERSPolice records reveal tensions between Cornell investigators and DA years before Jane Doe case
FOR SUBSCRIBERSThe U.S. fertility rate has hit another record low, CDC finds. Is that good or bad?
FOR SUBSCRIBERSViral attack ad featuring candidate’s estranged mother rattles bitter Ohio governor race
FOR SUBSCRIBERSTrump keeps promising ‘goodies’ on the campaign trail — but only if Republicans win
FOR SUBSCRIBERSWhy 1 in 5 multiple sclerosis patients like Christina Applegate are misdiagnosed
FOR SUBSCRIBERSWhat students are actually watching on YouTube
FOR SUBSCRIBERSPentagon’s Afghanistan withdrawal review expected to condemn military leaders
FOR SUBSCRIBERSTrans choruses offer refuge and community amid a wave of restrictive policies
FOR SUBSCRIBERSThe Role of the International Criminal Court (ICC)
FOR SUBSCRIBERSThe New York Knicks are the defending champs — and the face of the NBA’s biggest dilemma
FOR SUBSCRIBERSHow France’s far right is using a weekend of riots and chaos to seize power
FOR SUBSCRIBERS‘I trusted you all’: Judges question Trump administration’s credibility
FOR SUBSCRIBERSShould the Eagles have played Jalen Hurts after he was diagnosed with a blood clot?
FOR SUBSCRIBERSBattleground state voters weigh who should oversee their elections
FOR SUBSCRIBERSThe Data Dive: Steve Kornacki on how Susan Collins could transcend Trump in Maine
It is unclear how badly hackers are exploiting the flaw in the meantime. Patchstack, a cybersecurity platform, said it had received “reports of active exploitation.”
Read more The NBA star helping protect his opponents’ feet
The chief technical officer of Cloudflare, one of the internet’s largest website hosting companies, wrote on X: “We are seeing early attacks emerging and are updating mitigations as new vectors show up.”
The European Union’s technical cybersecurity advisory body, CERT-EU, said: “Organisations should consider isolating internet-facing applications from public networks until a fix is available.”
FOR SUBSCRIBERSPolice records reveal tensions between Cornell investigators and DA years before Jane Doe case
FOR SUBSCRIBERSThe U.S. fertility rate has hit another record low, CDC finds. Is that good or bad?
FOR SUBSCRIBERSViral attack ad featuring candidate’s estranged mother rattles bitter Ohio governor race
FOR SUBSCRIBERSTrump keeps promising ‘goodies’ on the campaign trail — but only if Republicans win
FOR SUBSCRIBERSWhy 1 in 5 multiple sclerosis patients like Christina Applegate are misdiagnosed
FOR SUBSCRIBERSWhat students are actually watching on YouTube
FOR SUBSCRIBERSPentagon’s Afghanistan withdrawal review expected to condemn military leaders
FOR SUBSCRIBERSTrans choruses offer refuge and community amid a wave of restrictive policies
FOR SUBSCRIBERSThe Role of the International Criminal Court (ICC)
FOR SUBSCRIBERSThe New York Knicks are the defending champs — and the face of the NBA’s biggest dilemma
FOR SUBSCRIBERSHow France’s far right is using a weekend of riots and chaos to seize power
FOR SUBSCRIBERS‘I trusted you all’: Judges question Trump administration’s credibility
FOR SUBSCRIBERSShould the Eagles have played Jalen Hurts after he was diagnosed with a blood clot?
FOR SUBSCRIBERSBattleground state voters weigh who should oversee their elections
FOR SUBSCRIBERSThe Data Dive: Steve Kornacki on how Susan Collins could transcend Trump in Maine
The U.K.’s National Cyber Security Centre recommended that “Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.”
The primary U.S. cybersecurity agency, the Cybersecurity and Infrastructure Security Agency, did not immediately respond to an email requesting comment.
Read more Secret Service study explores how to prevent workplace violence
