IT expert warns: "Take sites offline at once"

ORF NewsState / PublicCenter4 hr. ago

Cloudflare reported millions of attempts to exploit critical security vulnerabilities in the widely used programming language PHP after the flaws were publicly disclosed. CEO Matthew Prince stated that attack attempts escalated rapidly, rising from thousands before disclosure to millions within hours. The US National Security Agency and Germany’s Federal Office for Information Security advised immediately taking down unprotected websites, while PHP developers urged users to install available updates promptly. Numerous institutions worldwide, including universities, government agencies, and major platforms like Wikipedia, temporarily took their sites offline as a precautionary measure. The incident highlighted the extensive reliance on PHP across the internet, particularly through content management systems such as WordPress.

Bias read (Center): The article reports on a technical cybersecurity incident involving software vulnerabilities. While it mentions government agencies issuing warnings, the core subject is technological infrastructure and digital security rather than political policy or governance. The tone is factual and relies on on

oe24IndependentCenter6 hr. ago

Cloudflare reported millions of attack attempts against its network following the public disclosure of critical security vulnerabilities in the widely used programming language PHP. CEO Matthew Prince stated that exploitation attempts surged from thousands before the announcement to millions within two hours. In response, IT security expert Christoph Fischer urged website operators to immediately take unprotected sites offline, describing them as open doors for criminals until patches are applied. Fischer highlighted significant data protection challenges under GDPR, noting the difficulty of proving what data was compromised if a system is hacked through such a vulnerability. The German Federal Office for Information Security (BSI) had previously warned about the flaw, known as 'PHP-Shell,' which allows remote code execution and server takeover. Public institutions, hospitals, and universities across Germany took their websites offline as a precautionary measure while waiting for updates.

Bias read (Center): The article reports on a technical cybersecurity incident involving software vulnerabilities and corporate responses. While it mentions public institutions taking action, the core subject is IT infrastructure and digital security rather than political policy or governance. The tone is factual, relai