Digital Policy Office Concerned About Severe PHP Security Vulnerability, Requires Government Departments to Review Systems and Patch Promptly

The Digital Policy Office says it is highly concerned about a severe security vulnerability in PHP, a programming language widely used in website back-end operations worldwide, and has issued a security alert to all government bureaux and departments and public bodies, requiring an immediate and comprehensive review of information systems and prompt completion of patches, failing which the relevant systems must be temporarily taken offline or isolated. The Digital Policy Office has completed patching for the web hosting service that hosts government homepages, has so far received no reports of related cybersecurity incidents, and calls on the public and organisations to install the patches immediately.