What happened?
After two critical security vulnerabilities were identified in PHP infrastructure, a national-scale scan was launched in Türkiye. The flaws concern PHP, the server-side language that powers a large share of websites.
No issue on e-Devlet
Authorities said checks on the e-Devlet portal found no problems. However, the status of other public and private systems using PHP is not yet clear.
Why it matters
PHP underpins a significant portion of the internet. If such vulnerabilities are not patched, attackers can potentially gain remote access to systems and leak data. The scan of public systems is therefore critical to understanding how widespread the flaw is.
Secure software debate
The report also notes that a first lecture with students at Istanbul Technical University covered secure software development, project production and testing of security components, bringing the question of how to make development processes secure back into focus.
