Particle.news

Major PHP Security Flaw Prompts Cabinet Action and Local Website Shutdowns

A defect in the PHP language threatens a large share of public websites, raising the prospect of active cyber defence.

Overview

  • A serious, language-level vulnerability in PHP was publicly disclosed earlier this week, creating systemic exposure because PHP is used on a large share of websites worldwide.
  • The cabinet held a cyber security meeting on Oct. 26 with Prime Minister Sanae Takaichi present and ordered coordinated work to identify attackers while describing active cyber defence as a possible option.
  • Local authorities have taken dozens of public sites offline for safety checks and fixes, with Shizuoka Prefecture suspending 18 sites and Nabari City disabling hospital and nursing school pages while contracts and patches are reorganized.
  • Officials say there are no confirmed data leaks so far and that most remediation tasks fall to affected organizations, a reality that officials say highlights limits in central crisis response.
  • An expert panel has proposed a foreign-agent registration system and penalties for malicious interference, a move that could broaden legal tools but raises questions about civil liberties and how quickly new laws can be passed.