The flaws in PHP, which powers many websites and online services, could allow attackers to take control of web servers, steal data or disrupt services without needing login credentials, Singapore’s Commissioner of Cybersecurity Gwenda Fong said on Thursday.
“The threat is immediate,” Fong, who is also CEO of the Cyber Security Agency of Singapore (CSA), said in a social media post.