Two critical security vulnerabilities identified in the PHP software, which powers the infrastructure of millions of websites worldwide, have triggered a cyber security alert. According to information reported by Sky News, the vulnerabilities pose serious risks, including the remote takeover of unpatched servers and unauthorized access to user data.
It was stated that the security flaws, which were reportedly uncovered with the support of artificial intelligence, had existed undetected for a long time. According to experts, attackers can target systems that have not applied the necessary patches to execute malicious code on servers or to download and delete data.
Cloudflare CEO Matthew Prince stated that millions of attack attempts are being detected on the company's network every minute. Amazon Web Services also confirmed that the vulnerabilities are being widely exploited by attackers.
PRECAUTIONS IN PUBLIC SERVICES
Following the alert, public institutions and companies in some countries implemented temporary restrictions on their internet services. It was reported that more than 30 public services in the UK were taken offline, and four services experienced partial outages. Authorities announced that efforts are ongoing to identify the vulnerabilities in the systems and to implement security updates.
The severity of the vulnerabilities was rated 9.2 out of 10 according to the international security rating system CVSS 4.0. This level corresponds to the critical risk category. James Sullivan, a cyber security expert at the London-based Royal United Services Institute, noted that it is remarkable that some vulnerabilities have gone unnoticed for over a decade.
Experts warn that public institutions, healthcare systems, and organizations with delayed update processes, especially those using legacy software, may be more vulnerable to ransomware attacks. NetBlocks Director Alp Toker stated that if the vulnerabilities are exploited by malicious actors, disruptions in internet services could spread to wider areas.
However, simply visiting a site with a security vulnerability does not mean that a user's device will be automatically compromised. It is emphasized that the primary risk lies in the takeover of server control, the leakage of personal data, and the use of this data in fraudulent activities.
News Source: 12punto
