The Slovenian Office for Information Security has issued a warning regarding critical vulnerabilities discovered in the PHP programming language, which could allow attackers to take control of web systems. The assessment classifies the threat level as high, affecting both public sector entities and private companies designated as obligated parties under the Information Security Act effective last June. These obligations cover 18 sectors, including large and medium-sized enterprises deemed vital for national operations. While PHP developers have released patches to fix the issues, security providers have reported initial attempts at exploitation, although the PHP project itself has not confirmed active abuse. The office emphasizes that installing updates is the only complete solution, noting that temporary configuration measures only reduce risk. Authorities are monitoring the situation closely and plan to issue formal orders requiring immediate implementation of additional security measures by all obligated organizations.
Authorities in Slovenia have issued urgent warnings about renewed attempts at online fraud through phishing emails, which aim to steal users' login credentials, personal data, and banking information. The Financial Supervisory Authority (FURS) has highlighted these incidents, urging citizens to remain vigilant against suspicious messages that could lead to identity theft or financial loss. Phishing attacks typically involve deceptive emails or text messages that appear to originate from trusted institutions such as banks, insurance companies, or government agencies. These messages often contain links to fake websites where victims are asked to enter sensitive information or attachments that may carry malware. According to FURS, red flags include unexpected links, attachments, urgency or pressure for immediate action, unusual email addresses, and grammatical errors or awkward phrasing. The authority advises individuals who receive such messages to avoid clicking on links or opening attachments unless they are certain of their legitimacy. If there is doubt, recipients should forward the message to sd.fu@gov.si for verification. In cases where personal or banking details have been entered into a fraudulent link, users are urged to change passwords immediately and contact their bank if card or account information was compromised. Any suspected fraud should be reported to the police. OTP Bank has also warned customers about similar tactics used by scammers posing as the bank. These messages often include links to fake websites or demand urgent actions, such as confirming data, updating applications, or preventing account blocks. The bank emphasizes that it will never ask customers to provide login details via email or phone calls. Users are advised not to click on suspicious links, avoid entering personal information through unknown links, prevent remote access to devices by strangers, and refrain from approving payments or requests initiated by others. Pokojninska družba A, a pension insurance company, has raised concerns over phone calls where unknown individuals claim to represent the company and attempt to obtain personal data related to pensions. The company explicitly states that it does not conduct home visits nor request confidential information over the telephone. Individuals receiving such calls are advised not to share personal details and to report the incident to local authorities. In recent days, several media outlets have echoed these warnings, emphasizing the growing threat of cybercrime. The Ljubljanske novice newspaper reported that phishing attempts have increased significantly, with many messages appearing to come from official sources. They advise users to double-check the authenticity of any communication requesting sensitive information and to take immediate steps if they suspect a scam. Similarly, Maribor24 highlighted the importance of verifying the legitimacy of electronic communications, noting that phishing attacks can be difficult to detect due to sophisticated methods employed by criminals. The publication recommended contacting relevant authorities or financial institutions directly if there is any uncertainty about the origin of a message. Meanwhile, discussions around cybersecurity protection extend beyond individual vigilance. Telekom Slovenije has emphasized the need for comprehensive security measures, including both network-level protections and device-level monitoring. Their solutions, Varen splet and Varen ščit, offer layered defense strategies, preventing access to known malicious websites while also monitoring activity on devices to detect potential threats early. Experts warn that even small businesses and households are vulnerable to cyberattacks, with consequences ranging from financial losses to data breaches. Cybersecurity insurance, offered by companies like Triglav Insurance, provides coverage for costs associated with recovering from cyber incidents, including data restoration, legal assistance, and ransomware negotiations. As cyber threats continue to evolve, authorities and private entities alike stress the importance of proactive measures, including regular software updates, strong password practices, and cautious handling of unsolicited communications. With cybercriminals becoming increasingly inventive, maintaining awareness and preparedness is crucial in safeguarding personal and organizational data.
Go to the primary sources (10)
The official sources this coverage is built on. Read them directly to bypass framing.
OTP Banka has issued a warning to its customers about an increase in online scams (phishing attacks) targeting individuals who pretend to represent OTP Banka or other trusted institutions such as the Police and FURS. These scams aim to steal personal, security, or banking information or trick victims into authorizing transactions they did not initiate. The bank advises customers to avoid clicking on suspicious links in emails or SMS messages, not to enter login credentials, card details, or enable remote access to devices through unsolicited communications, and not to confirm payments or requests they did not trigger themselves. OTP Banka emphasizes that it will never ask customers to provide login details, card information, or grant device access via phone, email, or SMS. Victims are advised to change their digital banking passwords, block their payment cards, and immediately notify the bank if they suspect they have been scammed. They are also encouraged to report incidents to the police.
Bias read (Center): The article provides factual information about cybersecurity threats and does not present any political stance, opinion, or biased framing. It focuses solely on informing customers about phishing risks and protective measures without taking sides or emphasizing any particular political perspective.
Why factuality (95): The article accurately reports OTP Banka's warning about increased phishing attempts, aligning closely with the primary source document. It mentions phishing tactics like fake links and impersonation of trusted institutions, which matches the source. The article also provides practical advice on pro
Why objectivity (93): The article maintains a neutral and informative tone throughout, providing clear warnings and protective measures without any biased language or editorializing. It presents facts objectively and avoids taking sides.
24ur (POP TV)IndependentCenterFactual 90Objective 955 days ago
The Financial Supervisory Authority of Slovenia (Furs) has warned citizens about recent attempts at online fraud through phishing emails. These fraudulent messages aim to steal usernames, passwords, personal data, or payment card information by tricking recipients into clicking on suspicious links or opening unexpected attachments. Furs advises users to exercise caution, especially if the email creates a sense of urgency, comes from an unknown sender, or contains grammatical errors. Users are encouraged to report suspicious emails to sd.fu@gov.si for verification. OTP Bank has also issued similar warnings, emphasizing that banks will never ask customers to provide login credentials or enable remote access via email links or phone calls. Victims are advised to change their passwords immediately, block affected cards, and contact the police if financial damage occurs.
Bias read (Center): The article provides factual information about cybersecurity threats and official warnings from Furs and OTP Bank. It does not take a stance on any political issue, nor does it favor one side over another. The content is informative and balanced, focusing on public safety rather than political bias.
Why factuality (90): This article accurately reflects the current situation regarding phishing attempts, citing FURS directly and providing clear indicators of suspicious emails. The content matches the cross-source consensus and includes actionable advice, such as contacting FURS at sd.fu@gov.si and changing passwords
Why objectivity (95): The article maintains a highly objective tone, presenting facts without editorializing or favoring any particular perspective. It clearly outlines what phishing is, how to identify it, and what steps to take if affected, using neutral and factual language throughout.
The Financial Administration of Slovenia has issued a warning about recent phishing attempts using fake emails aimed at stealing users' login credentials, personal data, and payment card information. These deceptive messages often include suspicious links, unexpected attachments, create urgency, come from unknown email addresses, or contain grammatical errors. Recipients are advised not to click on links or open attachments if they doubt the legitimacy of the message and to report such emails to sd.fu@gov.si for verification. If individuals have already clicked on a link or entered their data, they are urged to change passwords immediately, contact their bank if financial information was compromised, and report any suspected identity theft or financial loss to the police. The administration emphasizes that careful handling can significantly reduce the risk of data misuse and online fraud.
Bias read (Center): The article provides a neutral warning about phishing scams without taking a stance on the issue. It focuses on informing the public about security measures rather than expressing political opinions or favoring any side.
Why factuality (90): The article accurately describes the resurgence of phishing attempts and aligns closely with the cross-source consensus. It mentions FURS, lists warning signs of phishing emails, and provides correct guidance on verifying email authenticity and responding to potential breaches. The information is co
Why objectivity (95): The tone remains neutral and informative, avoiding any subjective language or bias. It presents the issue objectively, offering practical advice without taking sides or expressing personal opinion.
Maribor24IndependentCenterFactual 85Objective 905 days ago
The Financial Administration of the Republic of Slovenia (FURS) has issued a warning about the resurgence of fake electronic messages designed to steal users' login credentials, personal data, and payment card information through phishing attacks. These messages often contain suspicious links or attachments that prompt users to enter sensitive information or log in to websites. FURS advises recipients to exercise caution, especially when opening links or attachments in questionable emails, and to avoid clicking on them if unsure. To verify the authenticity of such messages, users are encouraged to forward them to the email address [email protected], where they will be checked and informed of the results. If users have already clicked on a suspicious link or entered their data, they are advised to immediately change their passwords and contact their bank if financial information was compromised. In cases of suspected misuse of personal data or financial loss, individuals are urged to report the incident to the police.
Bias read (Center): The article discusses a general security warning from a government agency regarding phishing attempts and does not present any political stance, opinion, or controversy. It provides factual information about cybersecurity threats and offers practical advice to the public without any ideological or政治
Why factuality (85): The article accurately discusses phishing attempts and aligns with the cross-source consensus. It provides useful details on identifying phishing emails and the appropriate actions to take. However, it lacks some specifics found in other articles, such as the exact email address for reporting phishi
Why objectivity (90): The article is largely neutral and factual, focusing on informing readers about phishing risks and protective measures. While it avoids overt bias, there is a slight emphasis on the consequences of falling victim to phishing, which may subtly influence reader perception.
Zanima.meIndependentCenterFactual 75Objective 856 days ago
The article discusses the importance of protecting personal data stored on computers and tablets, which can include photos, videos, personal documents, bank information, school and work files, and various applications. It raises concerns about what could happen if individuals lose access to their data due to a cyber attack or if their information falls into the wrong hands. The article highlights the growing reliance on digital devices and the potential risks associated with cyber threats.
Bias read (Center): The article does not take a clear stance on any political issue. It focuses on general cybersecurity awareness and does not mention specific policies, politicians, or political debates. The content is informative and neutral in tone.
Why factuality (75): The article provides general information about cyber threats and phishing attacks but does not cite specific incidents or sources. It aligns with the cross-source consensus by emphasizing common risks like phishing, weak passwords, and malware. However, it lacks specific data or examples from the ot
Why objectivity (85): The tone is informative and neutral, focusing on educating readers about cybersecurity best practices. There is no overt bias or emotional language, though the article leans slightly toward emphasizing the importance of vigilance rather than presenting multiple perspectives.
DnevnikIndependent🔒CenterFactual 60Objective 806 days ago
The article discusses the limitations of relying solely on blocking dangerous websites for effective cybersecurity protection within companies. It emphasizes that threats can come from seemingly legitimate links or attachments that appear harmless at first but may later pose risks. The article highlights the importance of monitoring activities on devices and detecting potential cyberattacks early before they impact operations, data, or business processes.
Bias read (Center): The article provides a neutral explanation of cybersecurity practices without taking a stance on specific policies, parties, or ideological positions. It focuses on technical aspects of digital security rather than making any political arguments or favoring particular viewpoints.
Why factuality (60): This article focuses on cybersecurity solutions offered by Telekom Slovenije, specifically 'Varen splet' and 'Varen ščit.' While it provides accurate technical descriptions of these tools, it diverges significantly from the cross-source consensus, which centers around phishing and user awareness rat
Why objectivity (80): The article is generally neutral in tone, explaining the features and benefits of different cybersecurity tools. However, it has a promotional undertone due to its focus on Telekom Slovenije’s services, which may subtly favor their offerings over other available solutions.
The Slovenian Office for Information Security has issued a warning regarding critical vulnerabilities discovered in the PHP programming language, which could allow attackers to take control of web systems. The assessment classifies the threat level as high, affecting both public sector entities and private companies designated as obligated parties under the Information Security Act effective last June. These obligations cover 18 sectors, including large and medium-sized enterprises deemed vital for national operations. While PHP developers have released patches to fix the issues, security providers have reported initial attempts at exploitation, although the PHP project itself has not confirmed active abuse. The office emphasizes that installing updates is the only complete solution, noting that temporary configuration measures only reduce risk. Authorities are monitoring the situation closely and plan to issue formal orders requiring immediate implementation of additional security measures by all obligated organizations.
Bias read (Center): The article reports on a technical cybersecurity incident involving software vulnerabilities. While it involves government regulatory action and mentions specific laws, the core subject is IT infrastructure and software maintenance rather than partisan politics or ideological debate. The tone is dry
The PHP Foundation announced the release of two critical security patches for PHP versions 5.4 and later, addressing vulnerabilities rated 9.2 out of 10 in severity. The updates were released ahead of schedule after information regarding the flaws leaked, prompting immediate action by administrators to prevent exploitation. The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, affect widely used systems including Docker containers and various network hardware devices such as routers and NAS units. The discovery was facilitated by AI models, specifically GPT-5.6 Sol, through a collaboration between the Calif team, the PHP Ecosystem Security Team, and OpenAI under the Patch the Planet initiative. In response to the high risk, some websites have been temporarily taken offline, and Slovenian cybersecurity agency SI-CERT recommends immediate installation of the latest version, PHP 8.5.12.
Bias read (Center): The article reports on a technical cybersecurity incident involving software vulnerabilities. While it mentions national infrastructure and government recommendations, the core subject is IT security and software maintenance, which is apolitical. The tone is informative and urgent but does not takea
Two critical security vulnerabilities were discovered in the PHP programming language, which underpins a significant portion of the internet infrastructure including e-commerce sites, news portals, and government services. The PHP Foundation announced the release of security patches to address these flaws, which allow attackers to execute arbitrary code remotely without prior authentication. Both vulnerabilities carry a high severity score of 9.2 out of 10 on the CVSS scale and affect all PHP versions from version 5 onwards. In response to the threat, Slovenia’s Office for Information Security raised the national cybersecurity risk assessment to 'high' and advised organizations to immediately identify affected applications and install updates as soon as they become available. Technical details regarding specific affected versions and patched releases were scheduled to be published alongside the patch rollout.
Bias read (Center): The article reports on a technical cybersecurity incident involving software vulnerabilities. While it mentions the impact on government services and cites a state agency raising the threat level, the core subject is IT security rather than political policy or governance. The tone is informational,
Security firms report the first active exploitation attempts against two critical vulnerabilities in PHP, which were patched at 16:00 local time on October 21, 2026. Cloudflare detected initial attack probes at 09:43, more than six hours before the release of the security updates. The Dutch National Cyber Security Center (NCSC) noted that the attacks require only a single unauthenticated POST request and confirmed the existence of publicly available exploit code, though they have not yet verified widespread active exploitation. Researchers from Sansec validated the exploit's functionality across multiple popular platforms, including WordPress, Magento, Drupal, and Joomla. The Slovenian Computer Emergency Response Team (SI-CERT) issued an alert warning that mass scanning and exploitation are expected in the coming days. Server administrators are urged to update their systems immediately and check for signs of intrusion if their servers were exposed during the window between the leak and the patch.
Bias read (Center): The article covers a technical cybersecurity incident involving software vulnerabilities. While it references national cyber centers (SI-CERT, NCSC), the content focuses on technical facts, timelines, and mitigation advice rather than political debate, policy criticism, or partisan framing. There is
The Office for Information Security has assessed the cybersecurity threat level in Slovenia as high due to newly discovered vulnerabilities in the PHP programming language. These flaws allow attackers to remotely execute arbitrary code on web servers without prior authentication, potentially leading to a loss of control over digital systems. The assessment applies to all entities mandated by the Information Security Act, which covers 18 sectors including public institutions and large private companies. The office warned that because PHP is widely used in both the public and private sectors, these vulnerabilities could significantly impact the central state information and communication system. Organizations are advised to immediately install patches released by PHP developers, as temporary configuration measures only reduce rather than eliminate the risk.
Bias read (Center): The article reports on a technical security advisory issued by a government body regarding software vulnerabilities. While it involves a state agency and mentions the potential impact on national infrastructure, the content is primarily informational and technical. There is no evidence of partisan b
Researchers using OpenAI’s artificial intelligence identified two critical vulnerabilities in the PHP programming language, which is widely used for server-side web applications. The cybersecurity firm Wiz described these flaws as some of the most severe ever discovered by technology, noting they allow remote code execution without authentication. National cyber centers across the EU and globally have urged users to install patches immediately to prevent potential website compromises. In Slovenia, the Government Office for Information Security raised the national cyber threat assessment to 'high' due to these specific vulnerabilities, citing their potential impact on critical infrastructure. The office advised all organizations, including those under the Information Security Act, to identify affected systems and prepare for immediate patching or network isolation if updates cannot be applied instantly.
Bias read (Center): The article reports on a technical security incident and the subsequent administrative response by a government body. While it involves a state agency raising a threat level, the content focuses on factual recommendations, technical details of the vulnerability, and standard crisis management rather
The Information Security Office (UIV) has raised Slovenia’s national cybersecurity threat assessment to 'high' due to critical vulnerabilities discovered in the PHP programming language. These flaws allow attackers to execute arbitrary code remotely without authentication, potentially compromising web servers and information systems across both the public and private sectors. The elevated status applies to all entities mandated by the Information Security Act, which covers 18 sectors including large businesses and state institutions, as well as any other organization relying on PHP-based software. UIV emphasized that while temporary configuration measures can reduce risk, installing the patches released by PHP developers is the only complete solution. The office urged immediate action, noting that PHP is widely used in central state communication systems and numerous content management platforms.
Bias read (Center): The article reports on a technical security alert issued by a government body regarding a software vulnerability. While it involves a state agency and references legal obligations, the core subject is IT infrastructure and cybersecurity rather than partisan politics or policy debate. The tone is dry
The Information Security Office in Slovenia has raised the national cybersecurity threat assessment to 'high' following the discovery of critical vulnerabilities in the PHP programming language. These flaws allow attackers to execute arbitrary code remotely without authentication, potentially leading to the compromise of web systems across both public and private sectors. The assessment applies to all entities mandated by the Information Security Act, which covers 18 sectors including large businesses and state institutions, as well as any other organization relying on PHP-based software. Given the widespread use of PHP in content management systems and government portals, the office warns that these vulnerabilities could significantly impact the central state information system. Authorities recommend immediate installation of patches released by PHP developers, noting that temporary configuration measures only reduce rather than eliminate the risk.
Bias read (Center): The article reports on a technical security advisory issued by a government body regarding software vulnerabilities. While it involves a state agency and references legal mandates, the core subject is IT infrastructure and cybersecurity best practices rather than partisan politics or policy debate.
Government agencies and companies worldwide temporarily closed their websites after two critical vulnerabilities were discovered in the PHP programming language. The Slovenian Government Office for Information Security assessed the cyber security threat level in Slovenia as high, citing a CVSS score of 9.2 out of 10 for the flaws which allow remote code execution without authentication. The office urged organizations to immediately identify affected applications and install patches released by the PHP Foundation, or isolate systems if immediate updates are impossible. The American National Security Agency also issued warnings regarding the vulnerabilities, while the Academic Research Network of Slovenia noted potential temporary unavailability of some services. These issues affect a wide range of web platforms, including e-commerce sites, news portals, and government services.
Bias read (Center): The article reports on a technical cybersecurity incident involving software vulnerabilities. While it involves government agencies and national security assessments, the content focuses on technical facts, risk scores, and recommended mitigation steps rather than political debate or partisan policy
The Slovenian Office for Information Security has declared a high level of cyber threat due to the discovery of two critical vulnerabilities in the PHP programming language. These flaws allow for remote code execution without prior authentication, posing significant risks to numerous government agencies and private companies globally that rely on PHP-based systems. The office advises all affected entities to immediately install patches released by PHP developers, noting that temporary configuration measures only reduce rather than eliminate the risk. While some security providers have reported initial exploitation attempts, the PHP project has not confirmed active abuse, and the vulnerabilities are not yet listed on the US CISA Known Exploited Vulnerabilities catalog. Under Slovenia's Information Security Act, obligated entities across 18 sectors must implement additional security measures until the alert is lifted.
Bias read (Center): The article reports on a technical cybersecurity incident involving software vulnerabilities. Although it involves government agencies and national security protocols, the core subject is IT infrastructure and software maintenance rather than political policy debate or partisan conflict. The tone is
The Slovenian national cybersecurity center, SI-CERT, has issued a high-level alert regarding two critical vulnerabilities discovered in the PHP programming language, which powers approximately 70 percent of websites globally. These flaws allow attackers to execute remote code on unpatched servers without authentication, potentially leading to data theft, site defacement, or further attacks. Although patches were released immediately upon discovery, causing temporary outages for major sites like Wikipedia and several government portals, SI-CERT warns that mass scanning and exploitation attempts against outdated systems are expected in the coming days. The agency advises all system administrators to update their PHP versions to specific patched releases immediately, noting that while end-users are not directly affected on their personal devices, they remain vulnerable if website operators fail to apply security fixes.
Bias read (Center): The article reports on a technical cybersecurity incident involving software vulnerabilities. While it mentions government entities (Dutch, Danish, and Slovenian), the focus is strictly on IT infrastructure, patch management, and user safety rather than political policy, ideology, or partisan debate
PHP developers released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 on October 21, 2026, at 16:00 to address two critical vulnerabilities. These flaws allow attackers to execute code on servers without authentication. The PHP team advises all users to update immediately. The Slovenian Computer Emergency Response Team (SI-CERT) anticipates that attacks exploiting these vulnerabilities will appear quickly.
Bias read (Center): The article reports on a technical security patch for software infrastructure. It is apolitical, factual, and does not involve government policy, elections, or social controversies. The mention of SI-CERT is relevant to national cybersecurity but does not introduce political bias into the core tech-
PHP developers are scheduled to release urgent security patches at 16:00 Slovenian time on October 21, 2026, addressing two critical vulnerabilities. These flaws could allow attackers to execute arbitrary code on servers running the software. The National Computer Incident Response Team (SI-CERT) has advised system administrators to install the updates immediately upon availability. Security experts anticipate that active exploitation attempts will begin rapidly once the fixes are published.
Bias read (Center): The article reports on a technical cybersecurity event involving software maintenance and national advisory guidance. It contains no political arguments, partisan framing, or policy debates, making it apolitical.
The article discusses the dangers of phishing scams, particularly those involving fake delivery notifications. Readers receive messages claiming their package could not be delivered and are asked to confirm their address by clicking on a provided link. The link leads to a website resembling a legitimate delivery service, prompting users to enter payment card information. These scams are increasingly common, with nearly 2000 cases reported in one year according to SI-CERT, the national cybersecurity response center. Attackers often use multiple fake websites to trick users into entering sensitive data. The article highlights three reasons why these scams are hard to detect: they are well-written in Slovenian, mimic authentic sites closely, and arrive at expected times, such as when a package is anticipated. It advises users to access banking, delivery, or shopping sites directly through known applications or URLs rather than clicking on unexpected links.
Bias read (Center): The article focuses on cybersecurity threats and provides general advice on identifying phishing attempts. There is no political framing, bias, or mention of any political entities, parties, or policies. The content remains neutral and informative.
How each side covered it
The same event, grouped by the political lean of the outlets covering it.
progressive
center
conservative
★
How each side covered it
Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.
Slovenia
%2Ffile%2Fattachments%2F2995%2F2026-07-28_05-23-23_199117.jpeg&w=3840&q=75&output=webp&we)
