South Korea’s science ministry urged website operators to urgently check and update against PHP security vulnerabilities and to verify signs of compromise even after updating. A FAQ issued by the Ministry of Science and ICT and the Korea Internet & Security Agency said three remote code execution vulnerabilities were identified in PHP, allowing attacks without login. The ministry advised reviewing access logs and file changes, rotating key credentials and applying additional settings for one flaw pending a patch.

South Korea’s Broadcast Media Communications Commission is reviewing a plan to set a 1-year validity period for connected information (CI) used to identify individuals online. It plans to prepare an institutional improvement plan within this year and push for related legal revisions from next year. In a written reply to lawmakers, the commission said it is considering 1 year to balance security and service continuity and is also reviewing renewal cycles, replacement procedures and implementation feasibility.