Digital Policy Office Issues Security Alert Over Severe PHP Vulnerability
Start here
On 22 October 2026, the Digital Policy Office said it was highly concerned about a severe security vulnerability in PHP, a programming language widely used in back-end operations of websites worldwide, and had issued a security alert to all government bureaux and departments and public bodies, requiring an immediate and comprehensive review of information systems and prompt completion of patches, failing which the systems concerned must be temporarily taken offline or isolated. The Digital Policy Office also said it had completed patching for the website hosting service that hosts government departments' homepages, that no related cybersecurity incident reports had been received so far, and called on the public and organisations to install the patches immediately. A Radio Television Hong Kong report the same day also cited the above content from the Digital Policy Office, including the issuance of the security alert, the requirement for an immediate review of systems and prompt patching, failing which systems must be temporarily taken offline or isolated, and that patching had been completed for the website hosting service hosting government departments' homepages, that no related incident reports had been received and the call to install the patches. In a follow-up report the same day, the Hong Kong Computer Emergency Response Team Coordination Centre said the PHP vulnerability carried a very high risk and recommended applying the patches; the Digital Policy Office reiterated that it had issued the security alert and related requirements, and said no incident reports had been received.
Generated by AI from reporting · updated 3 hours ago
Reporting timeline
Follow the reports to explore different aspects of the story.
- 明報·即時港聞Cyber Security Incident Coordination Centre Says PHP Vulnerability Risk Extremely High as Digital Policy Office Says No Incident Reports Received
The Cyber Security Incident Coordination Centre says the PHP programming language has a serious security vulnerability with extremely high risk and recommends applying patches. The Digital Policy Office says it has issued security alerts to all government bureaux or departments and public bodies, requiring immediate review of systems and prompt patching, otherwise they must temporarily go offline or be isolated. The Digital Policy Office has completed patching for the web hosting service that hosts government departments' homepages, and as of now no related cyber security incident reports have been received.
- 香港電台·即時本地Digital Policy Office Issues Security Alert to Government Departments Over Critical PHP Vulnerability
The Digital Policy Office says it is highly concerned about a critical security vulnerability in the PHP programming language and has issued a security alert to all government bureaux or departments and public bodies, requiring them to immediately review their information systems and complete patching as soon as possible, otherwise the systems must be temporarily taken offline or isolated. The Digital Policy Office has completed patching for the web hosting service that hosts government departments' homepages. As of now, no related cybersecurity incident reports have been received, and it calls on the public and organisations to install the patch immediately.
- 政府新聞處·新聞公報Digital Policy Office Concerned About Severe PHP Security Vulnerability, Requires Government Departments to Review Systems and Patch Promptly
The Digital Policy Office says it is highly concerned about a severe security vulnerability in PHP, a programming language widely used in website back-end operations worldwide, and has issued a security alert to all government bureaux and departments and public bodies, requiring an immediate and comprehensive review of information systems and prompt completion of patches, failing which the relevant systems must be temporarily taken offline or isolated. The Digital Policy Office has completed patching for the web hosting service that hosts government homepages, has so far received no reports of related cybersecurity incidents, and calls on the public and organisations to install the patches immediately.
- 政府新聞網·新聞速遞Digital Policy Office Issues Security Alert to Government Departments Over Critical PHP Vulnerability
The Digital Policy Office says it is highly concerned about a critical security vulnerability in the PHP programming language and has issued a security alert to all government bureaux, departments and public bodies, requiring them to immediately review their information systems and patch them as soon as possible, or otherwise take them offline or isolate them temporarily. The Digital Policy Office has completed patching for the web hosting service that hosts government departments' homepages, has so far received no reports of related cybersecurity incidents, and calls on the public and organisations to install the patch immediately.
Activity over time for this story
Current activity28·Peak across comparable sources29（22 Oct, 20:00）·Change across comparable sources in 24 hours –
Trends compare the same fully observed participants, which may be fewer than the current activity total. Point or click to view hourly values; use the arrow keys with a keyboard.