
周三,欧洲及全球多个政府机构、学校和医院的网站相继陷入瘫痪。这些机构纷纷采取措施,保护自己的系统免受 PHP(一种广泛应用于互联网的编程语言)中的两个严重安全漏洞的攻击。全球网络安全机构警告那些无法及时应用安全补丁的组织,应考虑将受影响的网站暂时下线。PHP 的开发者已经发布了相应的更新补丁,以修复这两个漏洞。
Several government, school and hospital websites across Europe and beyond went offline on Wednesday as organisations rushed to protect their systems against two critical security vulnerabilities in PHP, a programming language that powers a large share of the internet. Cybersecurity agencies worldwide warned organisations that could not apply security fixes in time to consider taking affected websites offline. PHP's developers released a set of updates to address the two previously identified critical vulnerabilities.
这些预防性措施影响了多个国家的政府门户网站、公共服务机构、医院、金融机构、交通公司以及大型在线平台。一些组织暂时中断了服务;另一些组织则将网站下线,直到能够安装必要的安全补丁为止。以下是部分受到影响的知名网站和服务的列表:
The precautionary measures affected government portals, public services, hospitals, financial institutions, transport companies and major online platforms across several countries. Some organisations temporarily suspended services while others took websites offline until they could apply the necessary security patches.
德国:德国数字部表示,在发现 PHP 漏洞后,联邦信息技术服务提供商 ITZBund 已将多个政府网站下线。该部门发言人称,此次临时下线纯粹是出于预防目的,目前尚未发现任何安全事件。
Here is a look at the major websites and services that were taken offline or otherwise affected.GERMANYGermany's digital ministry said the federal IT service provider ITZBund had taken several websites offline after the discovery of the PHP vulnerabilities.A ministry spokesperson said the temporary deactivation was purely preventive and that authorities were not aware of any security incidents.FRANCEFrance's Interior Ministry temporarily took the websites of prefectures offline while awaiting a security fix for the PHP framework they use.
法国:法国内政部在等待针对所使用的 PHP 框架的安全补丁期间,暂时关闭了各省级政府的网站。省级政府是法国的地方行政机构。
Prefectures are local government administrative offices.
该部表示,在等待该框架的发布者发布补丁期间,已采取这一预防性措施。比利时在有关利用PHP漏洞发动网络攻击的报道出现后,比利时的外交部暂时将其网站下线。然而,该国网络安全中心表示,尚未记录到任何针对比利时网站的攻击。荷兰荷兰的多个机构效仿国家网络安全中心的做法,主动将其面向公众的网站下线。
The ministry said it had taken the precautionary measure while waiting for the framework's publisher to release a patch.BELGIUMBelgium's Foreign Ministry temporarily took its websites offline following reports of cyberattacks exploiting the PHP vulnerabilities. However, the country's cybersecurity centre said it had not recorded any attacks on Belgian websites.NETHERLANDSSeveral organisations in the Netherlands followed the example of the National Cyber Security Centre and proactively took their public-facing websites offline.
受影响的服务包括鹿特丹港、政府网站Overheid.nl、国家足球协会KNVB以及该国五大政党的网站。荷兰各地众多医院网站也受到影响。芬兰芬兰国家信息技术中心Valtori周三作为预防措施关闭了政府的公共网络服务。Valtori表示,尚未发现任何利用这些漏洞的尝试,并澄清此次中断并非由数据泄露导致。捷克捷克政府在周三当地时间晚上7点(格林尼治时间17点)将该国政府网站下线,此前该国网络监管机构建议这样做,以便当局实施必要的安全补丁。
The affected services included the Port of Rotterdam, the government website Overheid.nl, the national football association KNVB and the websites of the country's five largest political parties. Numerous hospital websites across the Netherlands were also affected.FINLANDFinland's state IT centre, Valtori, shut down the government's public web services on Wednesday as a precautionary measure. Valtori said it had not identified any attempts to exploit the vulnerabilities and clarified that the outage had not resulted from a data breach.CZECH REPUBLICThe Czech government took its website offline at 7 pm local time on Wednesday (1700 GMT) following a recommendation from the country's cyber watchdog to allow authorities to implement the necessary security patches."
“该措施旨在确保网站的安全运行。在关闭期间,网站及其内容将无法供公众访问。”政府办公室表示:“在应用建议的安全更新后,服务将恢复。”维基媒体运营在线百科全书维基百科的维基媒体基金会表示,正在努力解决PHP的安全漏洞。该基金会称,这些漏洞影响了基金会支持的所有系统以及使用该编程语言的志愿者运营系统。
The measure aims to ensure the secure operation of the website. During the shutdown, the site and its content will not be accessible to the public. Services will be restored once the recommended security updates have been applied," the government office said.WIKIMEDIAThe Wikimedia Foundation, which operates the online encyclopedia Wikipedia, said it was working to address security vulnerabilities in PHP. The foundation said the vulnerabilities affected all foundation-supported systems and volunteer-run systems that use the programming language."
基金会在一份声明中表示:“作为预防措施,我们已下线了若干其他系统,直至它们能够被安全修补。”互联网档案馆非营利数字图书馆互联网档案馆周三将其门户网站下线,以进行紧急维护和安全补丁。该组织在X上的一篇帖子中宣布了这一举措。该网站此后已恢复上线。Orange SA法国电信集团Orange作为预防措施,暂时暂停了对几个使用PHP的网站和应用程序的访问。
We have taken down a number of other systems as a precautionary measure until they can be safely patched," the foundation said in a statement.INTERNET ARCHIVEThe Internet Archive, a non-profit digital library, took its portal offline on Wednesday for emergency maintenance and security patches. The organisation announced the move in a post on X. The website has since returned online. Orange SAFrench telecommunications group Orange temporarily suspended access to several websites and applications that use PHP as a precaution.
该措施影响了该公司多家子公司和实体旗下的网站、服务和应用程序。日本日本多家政府机构在实施安全措施期间,部分或暂时暂停了在线服务。财务省和气象厅部分暂停了其在线服务,而国税厅则暂时将其服务下线。多家日本公司也宣布作为紧急措施的一部分,临时暂停互联网服务。
The measure affected websites, services and applications across several of the company's subsidiaries and entities.JAPANSeveral Japanese government agencies partially or temporarily suspended online services while implementing security measures. The Ministry of Finance and the Meteorological Agency partially suspended their online services, while the National Tax Agency temporarily took its service offline. Several Japanese companies also announced temporary suspensions of internet services as part of emergency measures.
其中包括券商野村(8604.T)、贷款机构三菱日联金融集团(8306.T)、航空公司全日空(9202.T)以及东日本旅客铁道(9020.T)。英国英国公共广播机构BBC表示,周三已将其部分门户网站下线。该广播机构还报道称,多个市政府已关闭其网络服务,其中包括爱丁堡市。加拿大加拿大政府表示,由于安全措施,其部分网站可能暂时无法访问或出现服务中断。
They included brokerage Nomura (8604.T), lender Mitsubishi UFJ Financial Group (8306.T), airline ANA (9202.T) and East Japan Railway (9020.T).UNITED KINGDOMThe British public service broadcaster BBC said it had taken some of its web portals offline on Wednesday. The broadcaster also reported that several municipalities had taken down their web services, including the city of Edinburgh.CANADAThe Government of Canada said some of its websites might be temporarily unavailable or experience service disruptions because of the security measures.
不过,政府表示,当时没有迹象表明其任何系统或所持有的信息遭到入侵。多个国家和行业的预防性关停凸显了PHP漏洞的广泛影响,各组织纷纷优先应用安全修复程序,并保护其系统免受潜在利用。——完
However, the government said there was no indication at the time that any of its systems or information holdings had been compromised. The precautionary shutdowns across multiple countries and sectors underscored the widespread impact of the PHP vulnerabilities, as organisations prioritised applying security fixes and protecting their systems against potential exploitation.- Ends