At ANSSI’s request, the French Interior Ministry placed all websites exposed to the critical PHP2Shell vulnerabilities under preventive maintenance, including those of numerous prefectures. The Economy Ministry, Météo-France, Les Échos and some sections of the tax authority’s portal have also been inaccessible since Wednesday afternoon, 21 October. CERT-FR rated the two vulnerabilities at 9.2 out of 10, and none of the offline websites reported an intrusion. A patch was released at 4 p.m. for several PHP versions, while Germany, Belgium, Finland and the Netherlands also took public services and exposed websites offline.
Source: Read the original article


