\n<\/p>\n
Ms Fong warned that many organisations, particularly small and medium-sized enterprises (SMEs) that rely on external IT vendors or hosting providers, may not realise their systems are vulnerable.<\/p>\n
PHP is widely used in websites, including those built on platforms such as WordPress, Drupal and Joomla.<\/p>\n
“My message to every organisation in Singapore is simple: do not wait,” she said.<\/p>\n
Organisations operating websites or online services should check whether their systems use affected versions of PHP, including those managed by third-party vendors.<\/p>\n
They should apply security patches immediately, prioritising systems accessible from the internet, and investigate whether their systems may already have been compromised, Ms Fong added.<\/p>\n
Those unsure whether they are affected should contact their IT teams, website developers or hosting providers.<\/p>\n
CSA said it was working urgently with government agencies, critical information infrastructure owners, major enterprises and industry partners to accelerate patching.<\/p>\n
It is also reaching out through business associations, cybersecurity service providers and technology partners to help smaller organisations address the vulnerabilities.<\/p>\n
“The priority now is to identify and patch vulnerable systems before attackers can exploit them,” Ms Fong said.<\/p>\n
“Cybersecurity is a shared responsibility. Acting quickly now can prevent a vulnerability from becoming a serious incident.”<\/p>\n<\/div>\n
\n