K-SignalAI-generated
Korea raises cyber alert over critical PHP flaws
South Korea's government has raised the private-sector cyber crisis alert from 'attention' to 'caution' after two critical vulnerabilities were found in PHP, a language used by roughly 70-75% of websites worldwide. The Ministry of Science and ICT issued the 'caution' alert at noon on October 22 and said it would strengthen incident-response staffing and emergency dispatch, while the Korea Internet & Security Agency (KISA) urged companies and site operators to update to the latest PHP version immediately. KISA identified the flaws as CVE-2026-109618 (improper handling of exceptional conditions) and a use-after-free issue, and it has notified about 5,900 member firms of the C-TAS threat-sharing system as well as CISO-reporting companies, according to KBS World and Dong-a Ilbo. The vulnerabilities are rated 'critical' internationally and could let attackers take over systems without authentication, Yonhap-linked reports note. Korean media report that the government is also considering emergency patches, and that Japan has similarly urged swift fixes, with Prime Minister Takaichi calling the situation 'very urgent.'
- PHP security flaws alert Korean government, firms
- Gov’t Calls on Companies to Implement PHP Security Measures amid Cyber Threats
- PHP 보안 취약점 “즉각 업뎃”…정부, 사이버위기경보 ‘주의’
- 韩政府要求主要企业采取措施防范PHP漏洞 考虑提供紧急补丁
- PHPに重大なぜい弱性 韓国政府も企業に対応呼びかけ
- 정부, PHP 취약점 발견에 ‘주의’ 경보 발령⋯즉시 보안 업데이트 적용해야
- PHP被发现高危安全漏洞 韩国互联网振兴院敦促用户进行安全更新
- 웹사이트 75% 쓰는 PHP서 보안 취약점…KISA “즉시 업데이트”
- Critical PHP Vulnerabilities Raise Global Cybersecurity Alarm
- PHP 보안 구멍에 일본도 비상···정부·은행·쇼핑몰 긴급 점검
