Banks and government agencies take websites offline over PHP security flaws
Summary
Banks and government agencies in Nepal have temporarily taken websites offline after serious security vulnerabilities were discovered in PHP. Nepal Rastra Bank has urged financial institutions and payment providers to strengthen security and update systems to prevent possible cyberattacks.
Key Points
- Banks, the Employees Provident Fund, the Social Security Fund and other agencies have shut down websites as a precaution after PHP security flaws were found.
- Nepal Rastra Bank has asked banks, payment operators and remittance companies to improve security and temporarily take vulnerable websites offline if needed.
- The central bank said the outages are preventive, not evidence of hacking, and customer data or financial assets have not been lost.
- Mobile banking and QR payments continue to operate normally, though internet banking and website-based services may be disrupted.
