Nepal takes government websites offline over critical PHP flaws

Emergency patching is underway after two vulnerabilities exposed systems worldwide to attacks that could allow hackers to run code on servers without logging in.

Nepal’s government has temporarily taken its online systems offline to address two critical security flaws in PHP, a programming language used by nearly 70 percent of websites whose underlying technology can be identified.