Broker Websites May Go Offline as Critical PHP Fixes Roll Out
By Tanya Chepkova
AI summary of the source article
Brokers may temporarily take public websites offline to apply urgent security fixes for two critical PHP vulnerabilities. Trading platforms and client accounts operating on separate systems remain accessible.
Why it matters
The discovered vulnerabilities could allow an attacker to run code on an affected web server without first logging in.
Key facts
- The US NSA warned organizations using PHP to update immediately or take affected systems offline.
- The critical vulnerabilities could allow an attacker to execute code on an affected server without logging in.
- Brokers including DEGIRO and Phillip Capital Securities Japan have addressed or prepared for website downtime while maintaining separate client trading access.
Source excerpt · Finance Magnates
Brokers with PHP-based websites may temporarily take their public pages offline while applying fixes for two critical security vulnerabilities. Clients won't lose access to their accounts or trading platforms, if they run on separate systems. The US National Security Agency warned organisations using PHP to prepare for an urgent update. If they cannot install it immediately, the agency recommended…