NSA warns of critical PHP security flaws threatening websites worldwide

The NSA has issued a warning about two critical PHP security vulnerabilities that pose a risk to websites globally, advising organizations to take affected systems offline if immediate security measures cannot be applied. Belgium's foreign ministry temporarily removed its websites after reports of cyberattacks exploiting the PHP flaw, though the Centre for Cybersecurity Belgium reported no attacks on Belgian sites. Japanese Prime Minister Takaichi called for checking whether sites use PHP and applying security patches. CISA stated no exploitation has been observed but warned the vulnerabilities threaten unpatched organizations.