Global technical infrastructure has witnessed intensive moves to contain a new security crisis related to the popular PHP programming language, following the discovery of two critical vulnerabilities that allow attackers to execute remote code without the need for credentials such as a username or password under certain conditions.
These vulnerabilities, one of which or its impacts is known as "PHP2Shell", have led to a wave of international warnings and technical emergency measures in several countries, amidst urgent efforts to apply official patches and close the gaps in affected systems.
International actions and governmental measures
Countries' responses to these cyber threats varied according to the level of risk:
- United States: The National Security Agency (NSA) and the Federal Bureau of Investigation (FBI) issued official warnings regarding the critical vulnerabilities.
- Netherlands and France: The Netherlands temporarily shut down some public service websites, while France made similar decisions regarding prefectures and administrative authority websites.
- South Korea: Raised the level of cyber alert and warning, demanding public institutions and companies to secure their systems and apply immediate updates.
- Japan and Scandinavian countries: The Prime Minister of Japan issued a public appeal to update websites, and countries such as Denmark, Norway, and Finland issued direct alerts to users and operators.
The situation in Turkey
Locally in Turkey, the Presidential Cyber Security Presidency moved to notify relevant authorities and institutions. It called on government institutions and the private sector to inspect their PHP infrastructures and apply official security updates as soon as they become available. Initial checks on the e-Government portal (e-Devlet) confirmed the security of the services and that they were not negatively affected by the discovered vulnerabilities.
What changes practically for institutions and individuals?
While initial indicators do not point to citizens' personal data being exposed to direct danger, technical authorities emphasize the importance of following strict preventative steps:
- Conducting a comprehensive inventory of institutional systems to determine if they rely on PHP and knowing the currently active versions.
- Applying official security updates issued by the PHP system developer without delay.
- Restricting system access to trusted and authorized IP addresses only.
- Closing international access routes for systems that do not require external connectivity.