
澳大利亚主要网络安全机构是全球范围内因后台编程代码存在“严重漏洞”而受影响的政府网站之一,这些代码支撑着网络世界的大部分网站。
Australia’s lead cyber security agency is among government websites across the world disrupted by “critical vulnerabilities” in background programming code that powers swathes of the web.
澳大利亚信号局表示,已知悉“可能影响PHP 5及所有后续版本的PHP报告问题”。该机构在社交媒体上发帖称:“组织和个人应监控PHP应用,并准备更新和应用补丁。”该机构邀请人们访问澳大利亚网络安全中心网站阅读完整警报,但截至周四上午,该网站——由PHP驱动——显示错误提示。
The Australian Signals Directorate said it was aware of reported issues “in PHP that may affect all versions from PHP 5 onwards”. “Organisations and individuals should monitor PHP applications and prepare to update and apply patches,” it posted on social media. The agency invited people to read the full alert on the Australian Cyber Security Centre’s website, but as of Thursday morning the site – which is powered by PHP – displayed an error notice.
内政部长托尼·伯克的一位发言人告诉NewsWire,当局“知悉中断情况”。“一些网站暂时无法访问,因为正在开展工作以减轻由此漏洞引发的风险,”该发言人表示。“在其环境中使用PHP的组织和个人应遵循澳大利亚信号局的建议,监控并审查PHP官方指南,并在安全补丁可用时及时应用。”
A spokesperson for Home Affairs Minister Tony Burke told NewsWire authorities were “aware of disruptions”. “Some websites are temporarily unavailable as work is undertaken to mitigate risks arising from this vulnerability,” the spokesperson said. “Organisations and individuals using PHP within their environments should follow advice from the Australian Signals Directorate and monitor and review PHP official guidance, and apply security patches as they become available.”
PHP为全球高达70%的网站提供支持,包括网站构建工具WordPress。PHP在一份声明中表示,“所有为Web请求提供服务的PHP安装”均面临风险。它警告称,如果这些漏洞被利用,黑客可能会劫持互联网服务器。后续报道
PHP powers up to 70 per cent of websites worldwide, including website builder WordPress. In a statement, PHP said “all PHP installations serving web requests” were at risk. It warned that if that if the vulnerabilities were exploited, hackers could commandeer internet servers. More to come