Singapore pushes for quick action on PHP security flaws as hackers prowl

Organisations in Singapore have been urged to immediately fix two critical security flaws in a widely used programming language amid reports of widespread attempts by hackers to exploit the vulnerabilities.

The flaws in PHP, which powers many websites and online services, could allow attackers to take control of web servers, steal data or disrupt services without needing login credentials, Singapore’s Commissioner of Cybersecurity Gwenda Fong said on Thursday.

“The threat is immediate,” Fong, who is also CEO of the Cyber Security Agency of Singapore (CSA), said in a social media post.