22.10.2026 06:31
After two critical security vulnerabilities were detected in the PHP software infrastructure used by websites worldwide, a cybersecurity alarm was raised in Turkey. The Presidential Cybersecurity Directorate launched a national security scan due to the vulnerabilities that could allow remote access to systems without a password and called on all institutions to take urgent measures.
Turkey has taken action following critical security vulnerabilities detected in the PHP software infrastructure used by millions of websites and online applications worldwide. The Presidential Cybersecurity Directorate has launched nationwide security scans covering public institutions and private sector organizations, while calling on system administrators to take urgent measures. It was reported that some public institutions in Europe temporarily shut down their websites as a precaution.
CRITICAL VULNERABILITY IN THE INTERNET'S INFRASTRUCTURE
The security vulnerabilities identified in the PHP infrastructure, widely used in the development of websites and corporate applications, have caused cybersecurity concerns worldwide.
It was stated that the security vulnerabilities referred to as "PHP2Shell" can, under certain conditions, allow attackers to execute malicious code remotely without needing a username and password.
It is assessed that this situation could lead to serious consequences, particularly in internet-facing systems, such as unauthorized access, breaches of data security, and disruption of digital services.
NATIONAL SECURITY SCAN LAUNCHED IN TURKEY
The Presidential Cybersecurity Directorate has put preventive security efforts into action across Turkey against these risks.
Security scans have been launched in critical infrastructures and related information systems, especially in public institutions.
It was announced that the efforts aim to detect possible attack attempts at an early stage and minimize the damage that security vulnerabilities could cause.
URGENT WARNING SENT TO ALL INSTITUTIONS
The Cybersecurity Directorate conveyed an urgent security notice to public institutions, private sector organizations, and critical infrastructure operators through the Cyber Incident Response Teams (SOME) Communication Platform.
In the notice, system administrators were asked to immediately check their internet-facing information infrastructures and apply the published security updates.
It was also emphasized that unnecessary external connections should be restricted, measures to prevent unauthorized access should be increased, and additional security measures should be implemented in necessary services.
GOVERNMENT WEBSITES SHUT DOWN IN EUROPE
Following two critical security vulnerabilities identified in the PHP infrastructure, cybersecurity agencies in the United States, the European Union, the United Kingdom, Japan, and Australia also took action.
The relevant institutions called on website administrators to urgently update their systems.
It was reported that many public institutions in European countries, including France, the Netherlands, Germany, Finland, and Belgium, temporarily closed their websites to access on security grounds.
It was stated that these measures aim to prevent attacks that could be carried out by exploiting the security vulnerabilities.
RISK OF ACCESSING SYSTEMS WITHOUT A PASSWORD
The most important danger highlighted by experts is that, under certain conditions, attackers can bypass authentication mechanisms and execute code remotely on targeted systems.
If such an attack succeeds, consequences such as websites being taken over, sensitive information being exposed, or online services being halted can occur.
However, the existence of the vulnerability does not mean that all websites using PHP are directly at risk. The risk varies depending on the software version used and the system's configuration.
CRITICAL CALL FROM THE CYBERSECURITY DIRECTORATE
The Presidential Cybersecurity Directorate announced that developments are being closely monitored to protect Turkey's digital infrastructure and ensure the uninterrupted continuation of critical services.
While it was stated that preventive efforts are being maintained in coordination with national cybersecurity units, institutions and organizations were asked to implement the technical and administrative measures in the published official security notice without delay.