Cybersecurity center has not yet seen 'active abuse' of PHP vulnerabilities, but warns that 'any system containing PHP is likely vulnerable'

The National Cyber Security Centre (NCSC) has not yet observed active exploitation of PHP vulnerabilities but warns that any system using PHP is likely at risk. The NCSC has taken its website offline as a precaution and advises organizations to prepare for an update expected to address these issues. They emphasize the importance of applying updates immediately upon release, as systems accessible from the public internet are presumed vulnerable. PHP vulnerabilities could allow hackers to fully compromise systems, posing significant risks to organizations using PHP on their web servers.