Danish Industry warns of serious security holes on websites

Indland ( https://www.dr.dk/nyheder/indland )

*******************************************************************

Danish Industry warns of serious security holes on websites

*******************************************************************

Kombit confirms to Ritzau that it is the same security holes that have led to the closure of Aula.

A computer screen showing the French government's official website, where a warning appears that the site may be shut down. (Photo: © Annegret Hilse, Reuters/Ritzau Scanpix) Today at 5:33 PM

In several places around the world, public authorities have been forced to shut down their websites on Wednesday.

This comes after two very serious vulnerabilities were found in one of the most widely used programming languages behind websites, webshops, and portals.

This is stated by Danish Industry (DI) to Ritzau.

- Today, very serious vulnerabilities have been disclosed in PHP, which is one of the most widely used building blocks behind websites and web solutions, writes Jeppe Engell, cybersecurity expert at DI.

- Regardless, all companies and authorities with PHP solutions on the internet must update now. Not tomorrow, he warns.

-------------------

Aula, DMI, and Kombit

-------------------

Earlier on Wednesday afternoon, both the Danish Meteorological Institute (DMI) and the municipalities' IT partnership Kombit shut down several digital solutions due to a security risk.

Kombit confirms to Ritzau that the potential technical security risk that led to the closure of Aula is related to the PHP issues.

According to Danish Industry, the vulnerabilities have been hidden for over ten years and were found using artificial intelligence.

The developers behind the programming language announced on Tuesday that they had identified the two critical security holes, Reuters writes.

Read also: Aula temporarily closed after possible security risk ( https://www.dr.dk/nyheder/indland/aula-midlertidigt-lukket-efter-mulig-sikkerhedsrisiko )

It was not until Wednesday at 1:45 PM that the developers were able to present an update that had closed the holes.

According to Reuters, there are reports that hackers have in the meantime attempted to exploit the vulnerabilities.

This has prompted public authorities in several countries to shut down their websites on Wednesday.

This applies, among others, to several places in Europe, including Norway, Finland, the Netherlands, France, and Germany.

Security authorities in Australia and Japan have also urged users of the PHP system to update their solutions or temporarily shut down websites until they have been updated, writes Norwegian NTB.

RITZAU

Danish Industry warns of serious security holes on websites ( https://www.dr.dk/nyheder/indland/di-advarer-om-alvorlige-huller-paa-hjemmesider )

Facebook ( https://www.facebook.com/share.php?u=undefined )

Warning: This article was translated by a Large Language Model, in case of doubt, you can always visit the original source.