The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued a Critical Alert: Act Now directive after the PHP Foundation announced it was on the verge of patching a pair of critical vulnerabilities. According to the Australian Information Security Association, many small businesses and healthcare companies lack mature cybersecurity programs to combat breaches.
Background
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued a Critical Alert: Act Now directive after the PHP Foundation announced it was on the verge of patching a pair of critical vulnerabilities. According to the Australian Information Security Association, many small businesses and healthcare companies lack mature cybersecurity programs to combat breaches.
Consequences
An attacker could run code on a website without the owner’s knowledge, according to Australian Information Security Association director Scarlett McDermott. This could have significant impacts on business operations, particularly for organisations that provide essential services. The global emergency has sparked fears of a dawning AI-security cataclysm as artificial intelligence accelerates the discovery and exploitation of cybersecurity weaknesses.
Provider responsibility
Organisations must implement cyber hygiene basics, according to Scarlett McDermott. This includes maintaining a clear asset register, identifying potential exposure weak points, and maintaining contingency plans for an array of breach scenarios. For organisations short on resources, prioritising protections for high-risk resources and considering taking systems offline while patching are recommended.
Practical response
To address the PHP vulnerabilities, Australian healthcare organisations and small businesses should review their systems and apply security patches as soon as possible. They should also assess their cybersecurity programs and consider implementing additional measures to protect against breaches. The ACSC’s Critical Alert: Act Now directive provides guidance on the necessary steps to take.
Talk to Podium IT
Need a clear next step?
Send a secure enquiry and tell us what you are planning. Please do not include passwords, patient information or other sensitive data.
General information only. It is not legal, privacy or compliance advice; requirements should be assessed for your organisation.