PHP Security Flaw Disrupts Nepali Banking Services
Summary
A serious vulnerability in PHP has forced Nepal Rastra Bank and most commercial banks in Nepal to temporarily shut down websites and online services to protect customer data. The flaw has also triggered widespread service disruptions globally as companies rush to patch affected systems.
Key Points
- Nepal Rastra Bank and most commercial banks in Nepal have temporarily suspended websites and online services after a serious PHP security flaw was discovered.
- The National Cyber Security Center issued an emergency advisory urging bodies and website users to upgrade PHP and isolate systems if immediate patching is not possible.
- Several banks, including Global IME Bank, Nabil Bank, Prime Commercial Bank, NIC Asia Bank, Siddhartha Bank, Machhapuchchhre Bank, and Nepal Investment Mega Bank, have closed web-based services for security reasons.
- The vulnerability has prompted global exploit attempts, with reports of widespread scanning and attacks after the flaw became public.
