Traficom reports no successful PHP attacks in Finland

Finland has not yet recorded a successful exploitation of PHP vulnerabilities, the Cyber Security Centre at the Finnish Transport and Communications Agency, Traficom, said, Yle reported.

Some online services have been temporarily unavailable this week because of critical PHP vulnerabilities. Some organisations have shut down their web services as a precaution to prevent the flaws from being exploited. Such outages do not in themselves mean that a breach has occurred or that data is at risk.

PHP is widely used in online services, and its critical vulnerabilities could lead to data breaches or leaks. Traficom says security vulnerabilities are being discovered at a record pace. Artificial intelligence is speeding up both the discovery of vulnerabilities and their potential exploitation, while also being used to fix them.

Organisations need to respond more quickly, Traficom said. Roni Kokkola, a security specialist at the Cyber Security Centre, urged organisations to update websites and other systems using PHP as soon as possible.

The Cyber Security Centre says it continually monitors new vulnerabilities, assesses their severity and informs organisations about necessary protective measures.