| Mobile Web

South Korea urges urgent checks for PHP vulnerabilities, says operators should check for intrusion traces after updates

South Korea’s science ministry urged website operators to urgently check and update against PHP security vulnerabilities and to verify signs of compromise even after updating. A FAQ issued by the Ministry of Science and ICT and the Korea Internet & Security Agency said three remote code execution vulnerabilities were identified in PHP, allowing attacks without login. The ministry advised reviewing access logs and file changes, rotating key credentials and applying additional settings for one flaw pending a patch.