Sri Lanka CERT issues critical security alert for website owners
Sri Lanka CERT has issued a critical cybersecurity alert urging public and private sector organizations and website developers to address security vulnerabilities affecting systems built using PHP.
In a statement dated Oct. 21, CERT warned that the vulnerabilities could expose affected systems to unauthorized access, data theft and disruption of operations.
PHP is widely used to develop websites and web applications.
CERT urged organizations to identify all systems using PHP, check their software versions and promptly apply security updates following instructions on the official PHP website.
Organizations were also advised to review system logs for unusual activity and restrict internet access to critical, high-risk systems that cannot be updated.