The PHP Foundation recently notified the public that many websites are vulnerable to hackers through simple code used in web design throughout the internet. Hypertext Processors (PHP’s) language has been widely used in website development for decades, and has now become a weak point in website security. Hackers across the world have launched simultaneous attacks on vendor websites by targeting outdated PHP coding, in order to obtain your sensitive information. If you are worried about your website security, here’s what you can do:

• Identify Affected Systems – Determine the use of PHP coding across your organization, including the use in internet-facing applications. Coordinate with your IT team, or website development vendor on your exposure.
• Patch Your System – Patching directions can be found directly on PHP’s website – PHP News Archive – 2026
• Mitigate Exposure – If you are unable to patch affected systems, you should take affected systems and applications offline until they can be properly secured
• Monitor For Potential Exploitation – monitor your system for suspicious activity, including unexpected PHP processes launching shells, executing commands or downloading tools.

There is a chance that your Cyber policy may provide coverage in the event your website must be voluntarily shut down or exploited. There could be additional coverage options if your organization experiences business interruption losses due to shut down or exploitation through your website exposure. If you have any questions, reach out to your insurance provider to assist in setting up your cyber security carrier.