New Zealand cyber agency urges immediate patching of critical PHP vulnerabilities

( October 23, 2026, 06:45 GMT | Official Statement) -- MLex Summary: New Zealand’s cybersecurity agency has urged organizations to immediately patch critical vulnerabilities in PHP, a programming language widely used in websites and web services. In a statement on Thursday, New Zealand’s National Cyber Security Centre warned that attackers could take full control of systems with PHP vulnerabilities. The agency said a patch had been released, but further updates from software and service providers may be required. It added that organizations unable to patch immediately should consider disabling public-facing web services. The agency also warned that patching would not remove existing compromises and asked organizations to check their exposure through third-party suppliers.Statement follows....

Prepare for tomorrow’s regulatory change, today

MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.


Know what others in the room don’t, with features including:

  • Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
  • Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
  • Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
  • Curated case files bringing together news, analysis and source documents in a single timeline

Experience MLex today with a 14-day free trial.

Start Free Trial

Already a subscriber? Click here to login