Newly Disclosed Critical Internet Security Vulnerability
Nonprofit staff should be aware of a newly disclosed critical internet security vulnerability that may affect organizations with websites or web-based applications powered by PHP, a technology commonly used to run websites and online services. Security authorities and industry researchers have advised organizations to take immediate action.
What You Need to Know
A serious vulnerability has been identified that could allow a cybercriminal to gain unauthorized access to an affected web server. Organizations with vulnerable PHP-based websites or applications should ensure they have been reviewed and updated.
Why This Matters
This issue affects the underlying web technology rather than a specific website platform. As a result, organizations may be impacted even if they have strong passwords, multi-factor authentication, or other security controls in place. Security updates are currently the recommended mitigation.
What Tech Impact Is Doing
If Tech Impact directly manages and supports your website or PHP-based application, our team is reviewing affected environments and taking appropriate action where necessary.
If your website or application is managed by a third-party web developer, software vendor, or hosting provider, we recommend contacting them as soon as possible to confirm that they have evaluated and addressed this vulnerability.
Recommended Executive Actions
We recommend that organizational leadership confirm who manages your public-facing websites and web applications
- If Tech Impact manages your website, no further action is necessary.
- If a third-party provides hosting for your website, request confirmation if they have taken the necessary security measures.
Given the severity of this vulnerability and the widespread use of PHP across the internet, we recommend treating this as a high-priority risk management activity and obtaining confirmation of remediation as soon as possible. Security agencies and industry experts are encouraging organizations to apply updates immediately.