Around 70% of websites and sources on the internet will need to be updated to patch a vulnerable hole in programming language PHP.
Early reports suggest that the issue could be catastrophic. The vulnerability sits within a section of code which underpins every request made to a website written in PHP. The flaw is now known, out there the internet, ready to be exploited.
Many websites, including Government websites, will be down today, installing and updating the new patch.
The UK Government has warned in a statement that organisations of all sizes are likely to be using PHP, and therefore are encouraging businesses to update their websites to the latest fixed version. Unpatched versions could potentially be exploited by cyber attackers.
What is PHP and how is it used?
PHP is an open-source programming language. It has been used for over 30 years. It is the foundation for much of the internet’s websites, including those built within WordPress and Drupal. For example, 40% of all websites are built in WordPress, that’s 37.3 million active websites.
Wikipedia, many online shops and blogs are written within PHP – which is why you may see these website shut down today and tomorrow. Other notable sites which have been reported to be spotted offline by the BBC include the Finnish government, Edinburgh council’s and the BBC itself – demonstrating the scale of the issue.
How was the vulnerability identified?
Ai, for its many flaws, is incredibly efficient. Artificial intelligence is quickly able to spot a gap or inaccuracy in a website, far quicker than any human eye. Before Ai, cybersecurity experts would test and scrape systems for flaws and holes – which is why penetration testing now mainly involves throwing Ai at our websites and seeing what gets through.
Why has the new PHP flaw caused global website shut downs?
The vulnerability was detected at least 4 days ago, and news of it has been embargoed until this morning- giving large corporations time to patch the hole. But now the vulnerability is well-known, by both cybersecurity experts and potentially, hackers.
Any website or internet source built in PHP which has not patched the hole will be vulnerable. Finding and managing every instance of PHP – every domain, subdomain, every traffic touchpoint and every portal is extremely difficult. This is why businesses and organizations are being asked to check with their web builder or developer to make certain an update has been installed.
What do you need to do in response to the PHP news?
The government has provided a list of best practice advice in order to mitigate your potential vulnerabilities. It includes:
- Identify systems running on PHP, or contact a developer who can.
- Look out for security updates relating to your infrastructure and systems
- Update to the latest version of PHP
- If you are unable to update, consider taking your site and systems offline for now.
- Continuously monitor for further updates from your third-party software providers on PHP updates.
If you are unsure of best action to take, talk to Club Insure and we can help you understand if you are at risk.
What to do if you have received a Zero Day Alert?
Some of our Club Insure clients may have received a Zero Day Alert on this issue from our partners. A zero day alert is an early warning about a vulnerability that needs attention.
What you can do:
- Confirm that the Zero Day Alert email is legitimate
- Contact Club Insure if you have receive a zero day alert from an insurer.
- Learn the steps which need to be taken, and whether it applies to you specifically.
- If the application cannot be patched, then take the site offline until it is.
What can social clubs, golf clubs and sports clubs do to remain safe from cyber risks?
A robust cyber policy is the recommended strategy to keeping your business financially safe from cyber attacks and cyber security breaches.
Cyber attacks will happen, it is certain – no business is too small or can be too secure. But cyber insurance is there to protect your finances when the inevitable comes to pass.
Kingsley Melville, Account Executive Associate Director at Club Insure says:
“The PHP news is a sobering demonstration why your business must have robust cyber insurance protection. In our experience, businesses that purchase cyber cover and have a robust cyber risk assessment have far fewer claims.”
What are the benefits of a Club Insure cyber policy for sports clubs and social clubs?
Your cyber policy may be able to offer the following benefits, depending on the provider:
- The insurer may be able to be instructed to carry out a monthly scan of your system to identify any weaknesses and keep you safe.
- If there is a breach, the insurer may provide an incident breach response team. Their specialist team are able to identify how the hackers got in, where they have gone within your system, where they have gone from your system to any third party systems and how to get the hackers out of your system.
- Cyber policies with Club Insure may, upon a breach, pay the costs as they occur. Whereas other cyber policies from insurers will require you to front the costs and then submit a claim to recover costs.
- Club Insure cyber insurance may be able to recover money that has been stolen by a cyber attack.
- If your club is victim to a ransomware attack, a cyber insurer may negotiate with the hackers to reduce any ransom payment.
Remember, cyber attacks are the most common type of attack on a business – and once a cyber criminal is in your system, they can steal your card information, names, data and addresses in seconds.
For a confidential review of your insurance portfolio, and a better understanding of the need for cyber insurance, talk to Club Insure. Our specialists have over 25 years in the sector, and can help you conduct a full cyber audit, including risk assessments and a security review.