澳大利亚政府网站在“严重”软件漏洞影响范围内
澳大利亚信号局(Signals Directorate)报告称,政府网站出现中断,包括cyber.gov.au,与一个严重的PHP软件问题有关。PHP开发者已发现两个严重漏洞,并敦促网站运营者安装更新。荷兰和芬兰的政府机构出于谨慎起见已将部分网站下线。安全专家警告,这些漏洞可能影响数百万台服务器,因为在能够识别编程语言的网站中,PHP约占75%。目前已出现攻击迹象,并已敦促PHP用户在补丁发布后尽快进行安装。
澳大利亚信号局(Signals Directorate)报告称,政府网站出现中断,包括cyber.gov.au,与一个严重的PHP软件问题有关。PHP开发者已发现两个严重漏洞,并敦促网站运营者安装更新。荷兰和芬兰的政府机构出于谨慎起见已将部分网站下线。安全专家警告,这些漏洞可能影响数百万台服务器,因为在能够识别编程语言的网站中,PHP约占75%。目前已出现攻击迹象,并已敦促PHP用户在补丁发布后尽快进行安装。
The developers of the PHP programming language are releasing patches for two critical vulnerabilities. PHP is used across large parts of the internet. Its security update rates both flaws 9.2 out of 10 on the CVSS v4.0 severity scale and urges users to upgrade once the release is available. The European Union Computer Emergency Response Team warned the flaws could allow attackers to run malicious code without logging in, and advised organisations that cannot patch to consider taking affected sites offline. The Australian Cyber Security Centre said it is not aware of active exploitation.