广泛使用的PHP编程语言被发现存在两个影响全球数字基础设施的严重安全漏洞，促使全球各地机构着手进行更新。
The widely used PHP programming language was found to have two critical security vulnerabilities affecting digital infrastructure worldwide, prompting organizations across the globe to implement updates.
“PHP2Shell”漏洞源于代码和内存管理中的错误，攻击者无需输入用户名或密码即可在受影响的系统上远程执行代码。
The “PHP2Shell” vulnerability stems from errors in code and memory management, which allow remote code execution on compromised systems without entering a username or password.
美国联邦调查局和国家安全局都向公众发出了关于这些新发现漏洞的警告。
The US Federal Bureau of Investigation and the National Security Agency both warned the public about these newly discovered vulnerabilities.
荷兰提供公民服务的网站被下线，而法国也针对省级网站采取了类似措施。
Websites providing citizenship services were taken down in the Netherlands, while similar measures for prefectural websites came to the fore in France.
丹麦、挪威、芬兰、日本和韩国等国发布了网络危机警报并立即实施了更新。
Countries including Denmark, Norway, Finland, Japan and South Korea issued cyber crisis alerts and implemented immediate updates.
土耳其网络安全局指示公共机构和私营组织将其PHP基础设施迁移至安全版本，同时全国范围的安全扫描和技术监测正在进行中。
Türkiye’s Cybersecurity Directorate instructed public institutions and private organizations to migrate their PHP infrastructure to secure versions, while nationwide security scans and technical monitoring are underway.
当局表示，对土耳其电子政务门户网站的排查未发现任何危及所提供数字服务安全的问题。
Probes into Türkiye’s e-Government Portal yielded no issues compromising the security of the digital services offered, authorities said.
这些安全漏洞对包含敏感信息的网站构成理论上的风险，而这些安全缺陷的存在本身并不一定意味着个人数据已遭到泄露。
These security vulnerabilities pose a theoretical risk to websites that contain sensitive information, and the mere existence of these security flaws does not necessarily mean personal data has been compromised.
专家表示，敦促互联网和在线应用的日常用户保持警惕并采取基本的数字安全措施，同时敦促企业和机构确定哪些内部系统使用PHP，并查明正在运行的是哪个版本。
Everyday users of the internet and online applications are urged to stay vigilant and practice basic digital security measures, while businesses and institutions are urged to determine which internal systems use PHP and identify which version is active, experts said.
官方安全补丁已经发布，但各机构需要自行识别受影响的系统，并将PHP安装更新至安全版本。
An official security patch has already been released, but it is up to organizations to identify affected systems and update their PHP installations to a secure version.
专家还建议，阻断所有进入国内系统以及无需全球访问的企业应用的国际网络流量，并且只允许来自可信且经授权IP地址的流量。
Experts also advised blocking all international web traffic to domestic systems and enterprise applications that do not need global access and allowing traffic only from trusted and authorized IP addresses.