Germany news: Many sites back online after PHP security fix

German government and public service websites began returning to the internet on Thursday morning following the installation of critical security patches for a vulnerability in the widely used programming language PHP. While many digital services in states including Rhineland-Palatinate, Saxony-Anhalt, and Hesse are operational again, disruptions persist at certain hospitals, universities, and municipal portals. The Federal Office for Information Security, known as BSI, cautioned that the threat level remains high. The agency stated that attackers could utilize artificial intelligence tools to analyze the newly released security updates and generate specific exploits within hours. Consequently, the BSI recommended keeping websites completely disconnected from the internet until absolute security could be guaranteed. The outage began after developers identified a severe flaw in PHP, which powers millions of websites globally. Authorities took numerous sites offline as a precautionary measure to prevent unauthorized access. In Berlin, the official capital portal berlin.de remained partially restricted on Thursday morning. Several regional hospitals and universities also faced limited connectivity. However, the Berlin S-Bahn railway announced during the night that its internet pages were fully accessible again. Similar recovery patterns emerged in western Germany. In Rhineland-Palatinate, the state decided to shut down pages utilizing the affected software. Fedor Rose, the state’s IT commissioner, confirmed there were no indications that third parties had exploited the weakness. By Thursday morning, many sites in both Rhineland-Palatinate and the Saarland were back online. In Saarbrücken, the city proactively disabled affected online services to protect its internal IT systems from potential risks. This included the municipal web portal, the utility company Stadtwerke, the light rail operator Saarbahn, and the central waste management entity ZKE. The city administration remained reachable via telephone and email, directing citizens to social media channels for current information. In Thuringia, many sites returned to the network late Wednesday evening, including those belonging to the State Chancellery, the state police, and the interior ministry. North Rhine-Westphalia saw several police online services restored after intensive technical work, according to the State Office for Central Police Services. Yet, other prominent websites in that region remained inaccessible on Thursday morning. Hessian authorities temporarily shut down many departmental and ministerial websites. The State Chancellery explained on Wednesday evening that the PHP flaw necessitated technical adjustments across the hessen.de platform and subordinate areas. Most of these sites, including those of the state government and all ministries, are now reachable. The city of Offenbach also restored its removed systems, stating they were productive and usable again by Wednesday night. International repercussions extended beyond Europe. China’s Ministry of Industry and Information Technology ordered organizations and users to immediately conduct comprehensive IT system checks and update to the latest secure PHP version. The ministry advised strengthening cybersecurity monitoring and changing accounts, passwords, and keys promptly. South Korea’s National Security Council convened a crisis meeting regarding the cyber incident. Finland’s state IT center shut down government web services as a preventive step. In France, websites for several agencies, including the Paris police, became unreachable. Belgium’s foreign ministry website went offline. The Netherlands reported issues with the digital identity service DigiD, the parliament website, and the national cybersecurity center’s site. The Wikimedia Foundation noted that Wikipedia was affected, advising users to expect outages. Popular applications were also impacted. Security experts warned that securing all government, public, and private devices could take months. This timeline applies particularly to hardware running outdated software that cannot be remedied through a standard patch. The BSI emphasized the likelihood of widespread exploitation shortly after the release of security updates. Hackers possess the capability to deploy AI-driven tools to dissect the patches and create corresponding attacks rapidly. Despite the gradual restoration of services, officials maintain that a complete clearance of the network cannot be declared yet. The focus remains on verifying whether any data was compromised during the window of vulnerability. Municipalities and federal bodies continue to monitor their systems for signs of intrusion while maintaining heightened defensive postures. The situation illustrates the fragility of digital infrastructure reliant on shared coding standards. As updates propagate, the risk of targeted attacks persists. Authorities urge continuous vigilance. The transition from emergency shutdown to normal operation is proceeding unevenly across different jurisdictions. Some entities have resolved the issue swiftly, while others face lingering technical hurdles. The global nature of the flaw means that coordinated responses are necessary to mitigate the broader impact on digital governance and public services.