Info Gov

News

NCSC urges immediate action over critical PHP flaws allowing remote code execution

October 21, 2026
The National Cyber Security Centre (NCSJ) has issued an alert encouraging UK organisations to take immediate action to mitigate two critical security issues in PHP, the server-side scripting language that underpins a large share of the world's websites and content management systems, after the PHP project published fixes for vulnerabilities that could allow an unauthenticated attacker to execute commands on any web server running the software.

Features

A different kind of target

September 18, 2025
David Gourlay explains why public sector cybersecurity needs a tailored legal approach.