
Vulnerabilities in PHP allow remote command execution. The Central Information Technology Center has disabled some of the BIP websites.
AI-generated summary
Critical vulnerabilities have been discovered in PHP software in all versions from 5.4 and above that allow remote command execution.
The CERT Polska team warns about serious vulnerabilities in PHP software, which is used by a huge number of websites, including popular content management systems such as WordPress, Joomla and WooCommerce. As we read in the announcement of the Ministry of Digitization, "vulnerabilities allow the attacker to remotely execute arbitrary system commands through errors in the memory management mechanism."
The vulnerabilities affect all PHP versions from 5.4 and above. Experts have no doubt - the threat is real and serious. "The only effective method of protection against the exploitation of vulnerabilities is to install an improved version of PHP," emphasizes the Ministry of Digitization.
Some BIP websites are temporarily disabled
Due to the detected vulnerabilities, the Central IT Center decided to temporarily disable the Public Information Bulletin pages operating in the Centralized Access to Public Information System (SSDIP).
"SSDIP is a system that enables public institutions to maintain Public Information Bulletin (BIP) websites. Temporary unavailability, as stated, applies only to websites operating on the website http://ssdip.bip.gov.pl, and not to all BIP websites in Poland," informs the Ministry of Digital Affairs.
The Ministry explains that temporarily disabling the website "will allow us to introduce the necessary security measures and ensure its safe operation."
Urgent cybersecurity operations center meeting
A meeting of the Joint Cybersecurity Operations Center has already been held on this matter. According to the Minister of Digitization, Krzysztof Gawkowski, "an action plan has been prepared and is currently being implemented."
The ministry appeals to administrators of all websites using PHP to urgently install the latest, improved versions of the software. If you detect traces of vulnerability exploitation, please immediately contact the CERT Polska team using the form available at http://incydent.cert.pl.
Problems not only in Poland
Already on Wednesday, the websites of government institutions in several countries in Europe and beyond were disabled after the disclosure of critical PHP security vulnerabilities. Government websites were closed, including: in Finland, the Netherlands, but also in Japan and Australia. On Wednesday, some people did not have access to parts of Wikipedia.
AI outlook — possibilities, not facts
Installation of improved PHP versions by site administrators
Very likely · Within days

Representatives of the EU, ENISA, Europol and Member States met to discuss the wave of cyber attacks on European commercial networks and coordinate a joint response.

In Poland, there were cyberattacks on refrigeration systems in stores and food distribution points. Hackers remotely raise the temperature of devices, which threatens to spoil goods. CERT Polska warns against leaving equipment connected to the network.

In Poland, a free application "Where to hide PL" has been made available, which contains a database of over 88,000 shelter points for over 24 million people. The tool also works offline and offers guides in case of crisis situations.

CERT Polska warns against a new wave of phishing attacks targeting entrepreneurs. Fraudsters send fake emails asking you to update your documentation in order to obtain your banking login details.

Cybercriminals send false calls to companies installing surveillance cameras, impersonating the Office of Personal Data Protection. The messages request hardware details, IP addresses and serial numbers in order to take control of devices.

OpenAI discovered an advanced recording device hidden in an executive conference room. Investigators allegedly determined that the equipment was installed by an employee of the company, Alfozan, who was fired and the matter was reported to the FBI.