方女士警告称，许多机构，特别是依赖外部IT供应商或托管服务商的中小企业，可能没有意识到其系统存在漏洞。
Ms Fong warned that many organisations, particularly small and medium-sized enterprises (SMEs) that rely on external IT vendors or hosting providers, may not realise their systems are vulnerable.
PHP广泛用于网站，包括基于WordPress、Drupal和Joomla等平台构建的网站。她说：“我对新加坡每个机构的信息很简单：不要等待。”
PHP is widely used in websites, including those built on platforms such as WordPress, Drupal and Joomla. "My message to every organisation in Singapore is simple: do not wait," she said.
运营网站或在线服务的机构应检查其系统是否使用受影响的PHP版本，包括由第三方供应商管理的系统。
Organisations operating websites or online services should check whether their systems use affected versions of PHP, including those managed by third-party vendors.
方女士补充说，它们应立即应用安全补丁，优先修补可从互联网访问的系统，并调查其系统是否可能已遭入侵。
They should apply security patches immediately, prioritising systems accessible from the internet, and investigate whether their systems may already have been compromised, Ms Fong added.
不确定是否受影响的机构应联系其IT团队、网站开发人员或托管服务商。
Those unsure whether they are affected should contact their IT teams, website developers or hosting providers.
新加坡网络安全局表示，正在紧急与政府机构、关键信息基础设施所有者、大型企业和行业合作伙伴合作，加快修补进度。
CSA said it was working urgently with government agencies, critical information infrastructure owners, major enterprises and industry partners to accelerate patching.
该局还通过商业协会、网络安全服务提供商和技术合作伙伴进行宣传，帮助较小规模的机构解决漏洞问题。
It is also reaching out through business associations, cybersecurity service providers and technology partners to help smaller organisations address the vulnerabilities.
方女士说：“当前的重点是在攻击者利用这些漏洞之前，识别并修补存在漏洞的系统。”
"The priority now is to identify and patch vulnerable systems before attackers can exploit them," Ms Fong said.
她说：“网络安全是共同的责任。现在迅速行动可以防止漏洞演变成严重事件。”
"Cybersecurity is a shared responsibility. Acting quickly now can prevent a vulnerability from becoming a serious incident."