 SECURITY ADVISORY Brief: On Wed October 21st, the NSA warned a critical security flaw in PHP — software that powers many business websites and online applications — could let attackers take control of affected servers, steal sensitive information, and disrupt operations. Wired reports that this vulnerability is of extreme risk and may affect millions of websites. Nonprofits are at extreme risk as many run unmanaged WordPress or Drupal content management systems. Affected Systems:
What Does This Mean to Me: If your website or online applications use an affected PHP version, attackers could take control, steal customer information, or interrupt your business. Have your hosting provider or IT team confirm immediately that the necessary security patches are installed. What to Do Now: We are recommending you contact your website hosting provider, web developer, or IT support team immediately to identify affected systems and confirm that the PHP security patches and related vendor updates have been installed. If an affected system cannot be patched immediately, we recommend you take your website offline until it can be secured. How We Can Help: We can work with your web developer and ask critical technical questions. Just introduce us by forwarding them this notice and CC:’ing me (rmickler@technoactivism.org). If you’re unsure if your website is vulnerable, let’s talk. Again, email me. I can figure out your risk profile and make a recommendation. I also know web developers who might be able to help.  TECHNOACTIVISM Privacy. Empowerment. Community. Resilience. Technoactivism is a 501(c)(3) Nonprofit Organization www.technoactivism.org | Scheduler | Privacy Policy |