
In response to the discovery of critical security vulnerabilities in the PHP programming language, the National Security Office held a civil, public, and military cyber security emergency response meeting to inspect usage status and discuss response measures.
AI-generated summary
A critical security vulnerability was discovered in PHP, used on websites around the world, that could allow the server to be taken over without authentication.
Checking the status of public, private, and defense PHP usage... ‘Review additional measures depending on the situation’
(Seoul = Yonhap News) Reporter Seol Seung-eun = With a critical security vulnerability discovered in PHP, a programming language widely used on websites around the world, the National Security Office held a civil, public, and military cyber security emergency meeting on the 22nd.
The meeting, chaired by Song Ki-ho, 3rd Deputy Director of the National Security Office, was held to oversee and coordinate each agency's response plan related to cyber threats based on security vulnerabilities in PHP.
At the meeting attended by director-level officials from the Ministry of Science and ICT, the Ministry of National Defense, and the National Intelligence Service, which are the civil, private, and military cyber crisis agencies, the status of PHP use and measures in each sector, including public, private, and national defense, were inspected and related vulnerabilities were discussed.
In addition, measures such as rapid application of security updates, temporary protection measures for websites where it is difficult to immediately install security updates, and inspection of traces of infringement were also examined.
The participating organizations agreed to closely cooperate by sharing security threat information and response status in real time, and the National Security Office plans to continuously check the status of measures and review additional measures necessary according to changes in the situation.
Song Ki-ho, 3rd deputy director of the National Security Office, said, "The vulnerability disclosed this time can take over servers without authentication, and attack attempts have already been reported overseas, so the extent of damage depends on how quickly actions are taken." He requested that the public, government, and military quickly complete the action as a 'one team.'
AI outlook — possibilities, not facts
Review and implement additional security measures as necessary
Likely · Within days

The Australian Signals Intelligence Department (ASD) warned in its annual threat report that hacking using AI is becoming an unprecedented threat and urged the public to prepare for the possibility of unexpected disruptions to key online services.

NVDB, China's Ministry of Industry and Information Technology, issued an ultra-high-risk security warning regarding the programming language PHP, which has revealed security vulnerabilities, and recommended a prompt update. It warned that an attacker without authentication could remotely execute arbitrary code and seize control of the server.

The Broadcasting Media and Communications Standards Commission held a youth protection cooperation meeting with 15 AI chat service providers on the 21st and announced that it will begin full-scale deliberation on AI chat services that create sexually suggestive characters and sexual conversations starting next month.

Video conferencing platform Zoom announced a 'Live Meeting Agent' equipped with real-time AI advice, voice interpretation, gaze correction, and deepfake detection at the annual event 'Zoomtopia 2026'. Work efficiency and security have been strengthened, and interoperability with external AI models has been improved.

On the 20th, a power problem at the London Google Cloud data center paralyzed financial, medical, and postal services in the UK for six hours. This incident has once again raised concerns about cloud dependence concentrated on a few large companies.

About 40 major websites using the 'kp' domain, including North Korea's Ministry of Foreign Affairs and the Korean Central News Agency, suffered access failures for about eight hours. Experts are weighing the possibility of a Chinese communication line failure or DDoS attack.