Cybersecurity concerns lead to shutdown of UK government services
Thirty-two Government services are offline and four are partially unavailable as officials address potential cybersecurity issues, reports BritPanorama.
Organisations globally are racing to fix a critical security flaw in the programming language PHP, which is widely used across the internet. This issue prompted precautionary measures from the UK government, resulting in some limited services becoming temporarily inaccessible.
Downing Street stated on Thursday that no large public-facing critical services have been directly affected, although a number of government websites are down while the situation is being rectified. A spokeswoman for Prime Minister Rishi Sunak confirmed that security updates are being applied to protect systems.
Tech minister Baroness Lloyd of Effra informed the House of Lords: “The information I have is that 32 Government services are unavailable and four are partially unavailable.” She noted that these outages are primarily a result of precautions taken during the update process.
The National Cyber Security Centre (NCSC) is actively collaborating with OpenAI, whose technology was instrumental in discovering the vulnerabilities, as well as with partners worldwide. A NCSC spokeswoman emphasised that ongoing work aims to identify and remediate potential risks to systems.
“Work has already taken place across Government to identify and fix potential exposures to our systems,” she stated, adding, “No large public-facing critical services are being affected by the exercise, but some limited services may temporarily be offline while security work is carried out.”
Importantly, she clarified that these shutdowns do not imply hacking incidents occurred; efforts continue to resolve any issues. The full list of affected services remains undisclosed, as it is not standard practice to release such information.
Cybersecurity chiefs had previously warned UK organisations of the critical issue discovered in PHP, which reportedly underpins nearly 70% of websites, according to cybersecurity firm Cloudflare. Lady Lloyd revealed that the NCSC was briefed on the vulnerability last week, allowing for proactive measures ahead of public disclosure.
Organisations have been advised to update to a secure version of PHP or consider taking their websites offline if they cannot do so immediately. The NCSC labelled the scale of the issue as “unprecedented,” suggesting it could be one of many similar challenges to come.
Chief technology officer Ollie Whitehouse revealed that the NCSC had executed a “co-ordinated disclosure process” and called for organisations to reassess their risk management strategies in the face of escalating cyber threats.
In a further related statement, Scottish Secretary Douglas Alexander dismissed concerns over potential security risks to next week’s Budget, reinforcing that he had no indication of any breaches. “I’ve had no indication whatsoever that there’s any problem in terms of a breach of Budget security,” he said.
Security flaws in PHP could allow attackers to remotely control affected web servers, leading to significant risks for many popular platforms, including WordPress and Magento. Cloudflare reported hundreds of thousands of hacking attempts soon after the vulnerability was announced, with millions continuing to be detected.
As of now, the urgency for website operators to apply critical updates remains high, especially after PHP developers expedited their security update following premature disclosure of the vulnerabilities.
Experts warn that this situation underscores the need for enhanced cyber awareness as the digital landscape evolves, necessitating a more robust approach to security across various sectors.
