Seoul:South Korea's science ministry has heightened the nation's cyber crisis warning level in response to critical cybersecurity flaws discovered in PHP, the programming language that underpins much of the internet. This move aligns with international efforts to mitigate the risks posed by these vulnerabilities.
According to Yonhap News Agency, the warning level was increased to "caution," the second-lowest in the country's four-tier system, as of noon on Thursday. The ministry has urged companies and government agencies to implement updates to secure their systems. Science Minister Bae Kyung-hoon emphasized the urgency of addressing the PHP flaw, which could potentially impact numerous websites, noting that exploit codes have already been made publicly available.
The decision follows a global wave of website shutdowns by government agencies and companies, prompted by the vulnerabilities revealed with the help of artificial intelligence (AI). Cybersecurity firm Wiz, whose researchers were among those who identified the flaws, characterized them as the most severe vulnerabilities ever detected by AI. PHP, or Hypertext Preprocessor, is integral to platforms like online shopping sites, Wikipedia, and WordPress, making the discovery particularly concerning.
The science ministry detailed that the newly discovered flaw could enable attackers to commandeer affected web servers without authentication, potentially leading to significant cyberattacks such as data breaches, system shutdowns, and website defacement. In response, PHP platform developers have released patches, and the Korea Internet and Security Agency (KISA) has issued a security update advisory.
The National Security Office (NSO) of the presidential office convened an emergency meeting to strategize the government's response to the PHP-related cyber threats. This meeting assessed PHP usage across public, private, and defense sectors, with officials committing to share information and coordinate responses effectively. The presidential office noted that public institutions and the military are relatively secure due to their minimal PHP usage.
Source Yonhap News Agency