Tech · 13 d ago
A critical PHP flaw takes websites offline, including the SAQ, STM and SAAQ in Quebec
The name researchers gave the two flaws
PHP2Shell
Two critical flaws in PHP, a programming language behind a large share of the web, could let hackers gain administrator access and reach data such as user passwords. Researchers call them PHP2Shell.
And us?
Quebec websites closed as a precaution
- Société des alcools du Québec (SAQ)
- Société de transport de Montréal (STM)
- Société de l'assurance automobile du Québec (SAAQ)
In Quebec, the liquor board (SAQ), Montreal's transit agency (STM) and the auto insurance board (SAAQ) closed their websites as a precaution. The SAAQ said its checks so far found no breach.
The STM said its trip-planning apps keep working, and government agencies in the Netherlands and Finland also took sites offline.
Websites exposed
22 million websites
About 22 million websites are exposed to the flaws, according to the cybersecurity firm Palo Alto Networks.
What site owners should do
PHP has released a fix and urges site operators to update immediately. Cybersecurity agencies in Europe, Australia, Japan and Britain say to take sites offline until the patch is applied.
