Science & Tech · Cybersecurity · 3 hrs ago
Turkey warns of website software flaws and begins security checks
Turkey’s Cybersecurity Directorate issued a nationwide warning after serious flaws were found in PHP, software used to run websites and online applications.
The warning covers public institutions, private companies and operators of critical infrastructure across Turkey.
The flaws could let attackers run commands on affected servers without logging in, putting data and online services at risk.
PHP’s developers released security fixes, and Turkey urged system administrators to install them, restrict outside access to administrative systems and block unnecessary connections from abroad.
Government websites in France, Denmark, Finland and the Netherlands went offline as a precaution while their operators worked to protect them.
Turkey’s e-Devlet public services platform had no reported security issue and continued operating without interruption.
Security scans and monitoring in Turkey continued as the directorate coordinated with institutions and cybersecurity response teams.
Turkey’s Cybersecurity Directorate issued a nationwide warning and began security checks after flaws were found in PHP, software used to run websites and online applications.
The flaws can allow attackers to run commands on affected servers without logging in, potentially putting data and online services at risk.
The directorate urged organizations to install security updates, limit outside access to administrative systems and block overseas connections that are not needed.
Checks found no security issue affecting Turkey’s e-Devlet public-services platform, which continued operating without interruption.
PHP’s developers released fixes on Wednesday, and security scans and monitoring in Turkey continued on Thursday.
- Who
- Turkey’s Cybersecurity Directorate, public institutions, critical infrastructure operators and private companies.
- What
- The directorate issued a nationwide warning and launched security checks in response to flaws in PHP software.
- When
- The warning and checks began on Wednesday. Monitoring continued on Thursday.
- Where
- Across Turkey, including checks of the e-Devlet public-services platform.
- Why
- The PHP flaws can allow unauthenticated attackers to run commands on affected servers, risking data and online services.
This story does not have two clearly opposing sides.
Turkey’s Cybersecurity Directorate issued a nationwide warning and launched security checks as PHP developers released fixes.
The directorate said checks found no security issue affecting e-Devlet and that security scans and monitoring continued.
- Affected software
- PHP
- Public platform checked
- e-Devlet
- e-Devlet users
- More than 69 million
- Recommended action
- Install security updates and restrict unnecessary outside access
- Fixes released
- Wednesday
3 sources
What people are saying
The PHP2Shell vulnerabilities carry a high risk