UK Government Services Offline After PHP Flaw Exposes Millions of Websites
Millions of websites, including UK government services, went offline after critical vulnerabilities were found in the PHP programming language.
Organisations and businesses worldwide are racing to update their computer systems following the discovery of significant cyber-security flaws in PHP, a widely-used programming language.
The vulnerabilities, identified by developers of the back-end web development language, led to numerous websites being taken offline on Wednesday and Thursday as a precautionary measure.
Researchers warned that the critical flaws could leave millions of sites vulnerable to potential hacks if not patched promptly. The UK government was among those that temporarily disabled some of its online services to safeguard systems while security updates were applied. Tech minister Baroness Lloyd of Effra stated that 32 government services were unavailable and four were partially unavailable, attributing this to precautionary measures.
While no successful attacks have been reported thus far, experts caution that the full impact of the vulnerabilities may not become apparent for months. The government has assured that no major UK public-facing critical services were affected and that work is ongoing to address potential exposures in collaboration with international partners and OpenAI.
Olly Whitehouse, chief technology officer at the National Cyber Security Centre (NCSC), described the event as unprecedented, noting it would likely have a universal impact. However, he confirmed there were no indications of successful breaches by hackers and that the NCSC was receiving positive confirmation that its advice was being acted upon.
Cyber-security lecturer Rory Hopcraft emphasized the need for the government to ensure its own infrastructure is up-to-date, suggesting they should practice what they preach regarding cyber-security standards for other organisations.
Smaller businesses have also felt the impact. Dean Presley, a garage owner in Chepstow, South Wales, reported being unable to process MOTs online since Wednesday morning. While MOTs can still be conducted, the associated paperwork and certificates cannot be printed or registered on the system, forcing him to revert to manual record-keeping and causing customer delays.
PHP, which stands for PHP: Hypertext Preprocessor, has been a cornerstone of web development for decades, powering a significant portion of the internet's dynamic websites. The discovery of these flaws has highlighted the ongoing challenges in maintaining the security of foundational digital infrastructure.
This article was written by AI based on publicly available news reporting. Original reporting by the linked source.
