The Hong Kong Computer Emergency Response Team (HKCERT) issued an urgent advisory on Thursday, warning website operators of two significant security vulnerabilities found in the PHP programming language. The watchdog categorized the threat as 'extremely high risk,' noting that the flaws could enable hackers to bypass security measures, execute malicious code remotely, and potentially seize control of compromised servers.

This alert follows a series of similar warnings issued by international cybersecurity agencies and government bodies globally. The vulnerabilities affect specific versions of PHP, a widely used scripting language that powers a vast portion of the internet’s infrastructure. Security experts emphasize that the primary defense against these exploits is for system administrators to apply the latest software patches provided by the PHP development team immediately.

While the HKCERT advisory focuses on the technical necessity of updates, it highlights the broader challenge of maintaining server security in an environment where core programming languages are frequently targeted. The watchdog has urged all organizations utilizing PHP to audit their systems and ensure that all web applications are running on patched, secure versions to prevent potential data breaches or server hijacking. There is currently no report of widespread successful attacks originating from within Hong Kong, but the watchdog’s classification of the risk level underscores the potential severity of the threat if left unaddressed.