“The attacks are already in full swing”: Mirko Ross on Tagesschau about the PHP vulnerability

A critical vulnerability in the PHP programming language is affecting companies, cities, municipalities and public authorities worldwide. In an interview with Tagesschau, asvin CEO Mirko Ross explains the situation and what website operators need to do now.

Most websites run on PHP, so a large number of systems could be affected by the new vulnerability. Attackers can use it to do things like copy data from servers.

Mirko Ross says there is no time to wait:

“As we speak, the attacks are already in full swing. That is why urgent action is needed.”

What website operators need to do now

For website operators, this means two things. They should update PHP to a patched version straight away. They should also check whether attackers have already got into their systems and caused damage. An update closes the gap, but it does not undo an attack that has already happened.

According to Germany’s Federal Office for Information Security (BSI), there are currently no signs that companies or critical infrastructure have been hacked through the vulnerability. That does not mean the danger is over. Private users should also be careful, as manipulated websites may already be circulating.

Click here for the Tagesschau report: 

https://www.tagesschau.de/tagesschau_20_uhr/video-1670950.html

Mirko Ross in Tagesschau on PHP Security vulnerability
Konrad Buck

Konrad Buck

Head of Press and Media Relations

Background & Expert Access for Media

I provide journalists with access to in-depth background information beyond our public materials, including:
  • Product & technology insights – technical context, solution architecture, and real-world use cases for professional and trade media
  • Expert commentary & background talks – our CEO is available as an expert source on current cybersecurity developments, threat landscapes, and the impact of AI on security and regulation
Media contact
I speak openly, fact-based, and without PR spin. I am a former IT journalist with decades of experience in the IT and cybersecurity space, familiar with the highs and lows of the industry. Off-the-record discussions are possible upon request.