Latvia shut 165 state websites over PHP security flaw

Latvia temporarily closed 165 state institution websites on Wednesday after a critical security vulnerability was found in PHP software, LSM reported. Experts said the threat was serious and carried a high risk of data leaks, but automated attempts to exploit the flaw were prevented.

The websites were taken offline as a precaution, not because of a breach, the Crisis Management Centre said. Its head, Colonel Arvis Zile, said the incident was therefore not considered a crisis. Software providers offered fixes after the problems were identified.

A unified platform hosting many state and municipal websites was unavailable for about three and a half hours on Wednesday evening. Services were then gradually restored, and most online resources are available again.

Zile said there is currently no way to ensure that similar incidents will not happen again, and such incidents may occur in the future. The centre will review the response, including how websites should be taken offline when threats are identified and what alternative services could be used.