STEG and ATCT take sites offline after global PHP security flaw

Tunisia's state electricity and gas utility STEG took its website offline on 22 October, followed a day later by the Tunisian Technical Cooperation Agency (ATCT), after the disclosure of PHP2Shell, a set of critical vulnerabilities in the PHP programming language that millions of websites run on. Both agencies said the suspension was a precaution to protect user data and systems; neither reported a confirmed breach, and no restoration date has been announced. Similar precautionary shutdowns were reported at government sites elsewhere in the days after the vulnerability's disclosure.

← See the full edition