Rapid action from Türkiye against the global PHP vulnerability

Two critical vulnerabilities have been detected in the PHP software, which forms the backbone of millions of websites and corporate applications around the world, that can allow cyber hackers to infiltrate systems without the need for a username or password. T.R. on the risk of what is called "PHP2Shell" internationally. A comprehensive security study has been launched on a national scale under the coordination of the Presidency's Cyber ​​Security Directorate.

Following the investigations, a statement was made regarding the status of the e-Government Gateway, which is one of the most curious topics. In the detailed technical controls carried out on the platform with more than 69 million users, no problems were found that would negatively affect the security and continuity of public services.

While it was stated that citizens continue to benefit from the services normally and without interruption, attention was also drawn to the working architecture of the platform: instead of collecting data in a single center, the e-Government Gateway works by connecting with relevant public institutions through instant and secure protocols. In this way, possible risks are prevented at their source with the multi-layered security architecture and 24/7 active monitoring systems.

The Cyber ​​Security Presidency made an important warning in order to eliminate the risk not only in the public sector but also in the private sector. Emphasizing that all institutions and organizations should urgently review their PHP infrastructures, the Presidency said; He reiterated his call to immediately apply the official security patches released by the manufacturer and switch to secure versions.

In the statement, it was noted that especially outdated (old) software components from past periods are the primary target for cyber attackers, and that it is vital to complete system checks without delay.

Working in full coordination with the Cyber ​​Incident Response Teams (SOME) for the early detection of possible risks, the Cyber ​​Security Presidency reported that national network scans and technical monitoring processes are continuing uninterruptedly.

It was stated that technical security measures and detailed guides that institutions and organizations may need are included in the security announcement published on the official website of the Cyber ​​Security Directorate.

Source: TRT Haber Açık RSS (Gündem) (Open Press / Translated Full Text)