Cybersecurity experts recommend five online safety tips after critical PHP flaws put web servers at risk this week.
The National Security Agency (NSA) warned that attackers could exploit the flaws to take control of servers. They could then steal data or disrupt services.
Most fixes depend on companies that run websites and online services. Users can still take several steps to lower their risk:
- Turn on multi-factor authentication. Use a different password for each site and keep an eye on account transactions.
- Enable automatic updates. Keep phones, computers and home routers current. Update apps and internet-connected home devices too.
- Check older smart devices. Digital security expert Runa Sandvik advised users to check whether vendors offer security updates.
- Be careful with unexpected links. Open the official app or type the website address yourself instead of following urgent messages.
- Use passkeys where available. Avoid using the same password across shopping sites and other accounts.
Read: AI-Driven Discovery Uncovers PHP2Shell Flaw Affecting 70% of the Internet
Trail of Bits chief executive Dan Guido said users cannot fix flaws on services they do not control. “You can’t patch your hospital’s website,” Guido said.
Experts said companies carry much of the burden. They need to install fixes quickly and limit damage if attackers break into a system. AI tools are also making some hidden software flaws easier to find and exploit, the source experts said.
Read: FBI Warns US Voters About AI Election Scams and Fake Links
Cybersecurity experts recommend stronger logins, prompt updates and greater caution with unsolicited links after serious PHP flaws raised online security concerns.
