National security warning from the Cyber Security Presidency for PHP infrastructure

The Presidency has launched a national-scale scan due to critical PHP vulnerabilities and has called on institutions to update systems and restrict access.

Don't leave your news choices to an algorithm - decide for yourself what you read. Add 12punto to your preferred sources! Don't leave your news to an algorithmYou decide which source to read; add 12punto to your preferred sources.

National security warning from the Cyber Security Presidency for PHP infrastructure

The Cyber Security Presidency has announced that critical security vulnerabilities have been detected in the widely used PHP software infrastructure worldwide, issuing a national-scale security warning.

In a statement made on the Presidency's social media account, it was reported that national-scale security scans have been initiated to identify the risks that these vulnerabilities may pose early on and to limit potential impacts. According to the statement, urgent security notifications have also been transmitted to relevant institutions and organizations.

A person working on a computer keyboard and a digital code image on the screen. — The Cyber Security Presidency has called on institutions to rapidly implement security measures for critical vulnerabilities in PHP infrastructure.

The warning requested that public institutions, critical infrastructure operators, and private sector organizations review their systems. The Presidency emphasized that implementing necessary security updates without delay is of great importance for the security of digital infrastructures and the continuity of critical services.

CALL FOR THREE FUNDAMENTAL MEASURES FOR INSTITUTIONS

The Presidency recommended that institutions and organizations implement the following steps to ensure the security of PHP-based applications:

- Identifying affected systems following the release of the manufacturer's official security update and transitioning to secure versions without delay.
- Restricting external access to management interfaces and critical PHP services to only trusted and authorized IP addresses using firewalls or ACL rules.
- Immediately closing systems that do not require international access to international traffic.

The Presidency stated that national-level coordination and preventive security efforts are ongoing, noting that institutions must regularly check their system security.