Important Security Update: PHP Vulnerabilities
What you need to know and what you can do to protect yourself online.
We wanted to make you aware of a recent security issue affecting PHP, a technology used by many websites and web applications.
What is PHP?
PHP is simply one of the technologies that helps websites work. It runs behind the scenes on a web server and helps websites display content, process information and perform functions such as forms, logins and online shopping.
You don’t need to understand the technical details. The important thing to know is that, just like other software, PHP needs to be kept up to date to protect websites from security threats.
What Happened?
Two critical PHP vulnerabilities were recently disclosed. These vulnerabilities could potentially allow attackers to remotely execute code on affected servers, creating a significant security risk. The vulnerabilities have been rated 9.2 out of 10 in severity, and thousands of Internet-connected servers in South Africa may have been affected.
Your Website Is Protected
The good news is that Infinity Web Solutions has already updated PHP on our servers. We have taken the necessary steps to ensure that the websites hosted on our servers are running the updated PHP version.
There is therefore nothing you need to do regarding the PHP update on our servers.
However, this is also a good reminder that website and online security is something we all need to take seriously.
A Few Simple Steps You Can Take
1. Keep your apps and software updated
Make sure your computer, phone, website applications and other software are running the latest available versions. Updates often include important security fixes.
2. Use 2-Factor Authentication where available
2-Factor Authentication (2FA) adds an extra layer of security to your accounts. Where possible, enable 2FA on your email, social media, banking and other important accounts.
3. Change your passwords regularly
Use strong, unique passwords for your email, website logins and other important accounts. Avoid using the same password across multiple services.
4. Be careful when entering personal information online
Before entering your ID number, telephone number, email address or other personal information on a new website, make sure you know who you are dealing with and that the website is legitimate.
5. Be especially careful with payment details
Avoid entering credit card or banking details on unfamiliar websites. Look for the secure HTTPS connection and check that you are on the correct website before making a payment.
6. Watch out for suspicious emails
Cybercriminals often use security scares, fake invoices and urgent requests to trick people into clicking links or providing information. If something doesn’t look right, rather check with the company directly before taking action.
Need Help With Your Website?
If you’re unsure whether your website, applications or software are up to date, please get in touch with us. We’re always happy to have a look and advise you on any updates or security improvements that may be needed.
Your online security matters to us, and we’ll continue to monitor and maintain the security of our hosting environment.
Thank you for trusting Infinity Web Solutions with your website and hosting.
