K-SignalAI-generated
Korea Urges Firms to Patch PHP Flaws
South Korea is in emergency response mode after critical PHP vulnerabilities were discovered, prompting the government to call on companies to implement security measures and raise the cyber crisis alert, KBS World reports. The Korea Internet & Security Agency (KISA) on Oct. 21 confirmed two flaws—CVE-2026-109618 and a use-after-free issue—and urged users to update to the latest version, with Dong-A Ilbo noting PHP is used by about 75% of websites. Yonhap reports that roughly 24,000 servers in Korea run vulnerable PHP versions without official patches, and cybersecurity firm Stealien is offering free checks for affected companies. Korean IT and security firms are responding urgently, with Kyunghyang quoting a senior official saying they are "responding seriously" to the threat.


















