The Ministry of Science and ICT has urged businesses and organizations to take urgent security measures following the discovery of two serious vulnerabilities in PHP, a programming language widely used for web services. Additionally, the government raised the cyber crisis alert level for the private sector from 'attention' to 'caution.'
On October 22, Deputy Prime Minister and Minister of Science and ICT Baek Kyung-hoon posted on his social media, urging companies and institutions operating websites and web services to implement urgent security measures.
Baek stated, "PHP has vulnerabilities that allow external malicious commands to be executed on servers without logging in, which could lead to customer information leaks and website tampering, necessitating swift action."
He requested that organizations confirm their use of PHP and apply security updates immediately. If updates are not feasible, he emphasized the need to consider blocking external access or suspending services. He also urged immediate reporting to the Korea Internet & Security Agency (KISA) if any breaches are suspected.
As of noon on the same day, the government elevated the cyber crisis alert for the private sector to 'caution.'
Baek added, "We will strengthen our response personnel and emergency deployment systems, and work with hosting, cloud service providers, and the security industry to prevent damage and ensure rapid response."
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.