Advertisement oop
Story continues below
Advertisement 1

Some government websites offline due to cyber threat risks

Canadian Centre for Cyber Security said vulnerabilities affecting PHP, a website scripting language

Article content

See more Toronto Sun on Google — save as a Preferred Source

The Canadian government temporarily shut down some of its websites as a precautionary measure this week after being advised its software was at risk of cyber threats.

Article content
Article content

Minister of Artificial Intelligence and Digital Innovation Evan Solomon said the decision was taken following guidance from the Canadian Centre for Cyber Security.

“This is in response to a vulnerability identified in PHP, software used by websites around the world,” the MP for Toronto Centre said on social media Wednesday. “This is a global issue, and other governments and organizations are also taking protective measures.”

Advertisement 2
Story continues below
Article content

Solomon said the government is taking this situation “extremely seriously” and that tech teams are working on patches before restoring the affected websites.

However, he did not identify which websites were offline or how long they would be out of service.

Read More
  1. A Halton Regional Police Service vehicle.
    Halton cops halt use of Crime Stoppers after data breach
  2. Toronto Crime Stoppers is not accepting information from the public
    Toronto Crime Stoppers shutting down tip line ‘immediately’ after data breach

Critical vulnerabilities affecting PHP

The cyber security agency said in an alert to IT professionals and managers that it was aware of critical vulnerabilities affecting multiple versions of PHP, a website scripting language.

The agency said a “successful exploitation could allow an unauthenticated threat actor to execute arbitrary code on an affected system” and that internet-facing PHP servers and applications are at heightened risk. Security updates were released to address the vulnerabilities.

RECOMMENDED VIDEO

Loading...
We apologize, but this video has failed to load.
Try refreshing your browser, or
tap here to see other videos from our team.

“Organizations should identify affected systems and apply the appropriate updates immediately,” the government agency said, adding there is no active exploitation that has been identified but that could change quickly.

Solomon advised organizations using PHP to apply the latest security updates as soon as possible and to follow the Canadian Centre for Cyber Security for the latest updates.

Article content
Comments
You must be logged in to join the discussion or read more comments.
Join the Conversation

Postmedia is committed to maintaining a lively but civil forum for discussion. Please keep comments relevant and respectful. Comments may take up to an hour to appear on the site. You will receive an email if there is a reply to your comment, an update to a thread you follow or if a user you follow comments. Visit our Community Guidelines for more information.