Numerous websites, including those belonging to the Canadian government, experienced downtime on Wednesday to address a security vulnerability discovered in PHP, a widely utilized programming language.
On Wednesday, PHP developers swiftly issued updates to address vulnerabilities in their software, urging website operators to promptly implement the fixes. The PHP Foundation emphasized the critical need for immediate updates for all systems running PHP.
In response to the situation, Artificial Intelligence Minister Evan Solomon confirmed the temporary shutdown of some federal government websites as a precautionary measure. Solomon stressed the importance for organizations utilizing PHP to apply the security updates promptly to mitigate risks.
Government websites such as those for the Canadian Centre for Cyber Security and Statistics Canada were inaccessible for a period on Wednesday. The Newfoundland and Labrador and Prince Edward Island government sites also displayed messages attributing the shutdown to a global security incident.
PHP, originally known as “Personal Home Page,” has been a foundational language on the web since the early 1990s, supporting platforms like WordPress, Drupal, Joomla, and Magento.
The vulnerability within PHP was uncovered using artificial intelligence, according to Alphabet-owned cybersecurity firm, Wiz. The flaw, present for over a decade, was identified and patched through collaboration with OpenAI, Automattic, AWS, Microsoft, and other industry partners.
PHP powers approximately 75% of websites identifiable by their programming language, according to web technology tracker W3Techs. International cybersecurity agencies in Europe, Australia, Japan, and Britain have advised PHP users to implement the necessary fixes, with some governments proactively taking websites offline to address the issue.
