PHP vulnerabilities still a concern

Anssi, France's cybersecurity agency, has warned that the issue of PHP vulnerabilities is not yet fully resolved, highlighting potential "secondary impacts" that could affect systems beyond websites.

PHP flaws lead to website shutdowns

Numerous websites were temporarily taken offline after security flaws in PHP, a widely used programming language, were identified. These flaws were discovered using AI tools, prompting site operators to shut down their services as a precaution.

Patches released but risks remain

Patches to fix the "critical vulnerabilities" have been published by the PHP development foundation, allowing most sites to return online. However, Anssi cautions that the problem is not definitively resolved and urges awareness of ongoing risks.

Risks extend to devices and software

The agency warns that the risk is now shifting from websites to third-party products that use PHP, including routers, firewalls, and smart devices. These systems must be updated with the latest patches to prevent exploitation of the flaws.

Exploitation attempts already reported

On October 26, the Government Cybersecurity Monitoring, Alert, and Response Center reported "exploitation attempts" targeting specific PHP deployments. Additionally, CISA in the U.S. has listed the vulnerabilities as "exploited," indicating they are being used in cyberattacks.

PHP's widespread use increases exposure

According to Anssi, more than 660,000 IP addresses and potentially over 6 million applications in France use PHP, underscoring the scale of the potential impact if these vulnerabilities are not fully addressed.