Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
(CNS): The UK’s National Cyber Security Centre published an alert on 21 October about critical vulnerabilities affecting PHP, a software used by many websites and online applications worldwide.
Summary
However, a security update to address them has been released. The NCSC has advised all organisations using PHP to assess their exposure, regardless of version.
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
A newly disclosed vulnerability is only a real risk to your organization once it's confirmed present and exploitable in your own environment, not every CVE applies equally to every network. Knowing the difference is exactly what a proper vulnerability assessment is for.
Coverage details
We've archived 5 other articles touching the same topic (cyber safe campaign, cyber security unit, ict) , see the full security news archive.
Related security advisories
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.