Digital Policy Office Issues Security Alert to Government Departments Over Critical PHP Vulnerability

The Digital Policy Office says it is highly concerned about a critical security vulnerability in the PHP programming language and has issued a security alert to all government bureaux, departments and public bodies, requiring them to immediately review their information systems and patch them as soon as possible, or otherwise take them offline or isolate them temporarily. The Digital Policy Office has completed patching for the web hosting service that hosts government departments' homepages, has so far received no reports of related cybersecurity incidents, and calls on the public and organisations to install the patch immediately.