Edinburgh council website offline amid global cyber security alert
Two critical vulnerabilities with the PHP programming language are said to have been found
The City of Edinburgh Council’s website is currently offline amid reports of that a critical cyber-security flaw has been found in a programming language impacting sites around the world.
A council spokesperson said the website was down for “essential maintenance”, however they are yet to confirm whether it is linked to the cyber security alert.
They added: “We are currently waiting on an update from our provider and hope to have the website up and running as soon as possible.”
It is unclear how long the outage will last, leaving residents without access to council services and online payments.
Two critical vulnerabilities with the PHP programming language which powers websites across the web are said to have been discovered with a fix issued on Wednesday afternoon.
Website operators are now racing to patch these flaws after agencies like the UK’s National Cyber Security Centre urged them to take urgent action to mitigate the issue.
The agency instructed operators to identify systems running PHP and update them to the latest version.
It added that the vulnerability with the software, which creates webpages and retrieves database information before sending the finished page to your browser, could be exploited by attackers.
Early attacks are already being spotted according to web security firm Cloudflare’s chief technology officer Dane Knecht.
In PHP’s advisory notice announcing the fixes, the programmers behind the open-source programming language said: “There are no complete mitigations, updating is the only safe choice.”
The council’s website is among a number of sites currently down for maintenance, including government agencies across Europe.
Comments
Want to join the conversation? Please or to comment on this article.