
一位部长周四在上议院表示,因涉及 PHP 编程语言的持续网络安全问题,英国政府有 32 项服务不可用,4 项服务部分不可用。
Thirty-two UK government services are unavailable and four are partially unavailable amid an ongoing cybersecurity issue involving the PHP programming language, a minister told the House of Lords on Thursday.
数字、文化、媒体和体育部国务次官埃弗拉的劳埃德女男爵表示,中断“主要源于”在应用更新和安全缓解措施以保护系统时采取的预防性措施。
Baroness Lloyd of Effra, parliamentary under-secretary of state for the Department for Digital, Culture, Media and Sport, said the disruption "largely resulted" from precautionary measures taken to protect systems while updates and security mitigations are applied.
她说,政府正在与相关机构密切合作,“安全可靠地恢复服务”。“政府在公开披露前采取了主动行动,”劳埃德说,并补充称,各机构已获告知该漏洞,并被建议识别可能受影响的系统、评估其风险敞口,并准备实施安全更新和缓解措施。
She said the government was working closely with agencies to "restore the services safely and securely." "The government acted proactively ahead of public disclosure," said Lloyd, adding that agencies had been alerted to the vulnerability and advised to identify potentially affected systems, assess their exposure and prepare to implement security updates and mitigations.
劳埃德表示,国家网络安全中心已向更广泛的经济领域发出“5 万次主动通知”,建议企业和其他组织应采取的行动。她补充道:“政府继续密切监控事态发展,并与各部门合作,维护公共服务的安全韧性和可用性。”
Lloyd said the National Cyber Security Centre had made "50,000 proactive notifications to the wider economy to advise business and other organizations on what actions they should take." "The government continues to monitor the situation closely and work with departments to maintain the security resilience and availability of public services," she added.
唐宁街表示,“没有大型面向公众的关键服务受到影响”,同时承认随着安全工作继续,“一些有限的服务可能暂时处于离线状态”。唐宁街补充道:“这并不意味着它们被黑客攻破了。”
Downing Street said that "no large public-facing critical services are being affected" while acknowledging that some "limited services may temporarily be offline" as security work continues. "This does not mean they were hacked," it added.
PHP 编程语言被广泛用于开发网站,该漏洞促使全球各组织采取行动,保护可能受影响的系统。
The vulnerability in PHP, a programming language widely used to develop websites, has prompted organizations around the world to take action to secure potentially affected systems.
互联网基础设施平台 Cloudflare 在美国社交媒体公司 X 上表示,已在其网络上观测到“数百万”次黑客攻击尝试。不过,没有证据表明这些尝试已成功。
Internet infrastructure platform Cloudflare said on US social media company X that it had observed "millions" of hacking attempts on its network. There was no evidence, however, that the attempts had been successful.