{"text":[[{"start":12.28,"text":"Companies and governments are racing to protect their websites against critical security vulnerabilities in a widely used programming language, as warnings mount over hackers attempting to exploit the flaws."}],[{"start":23.14,"text":"The moves in Asia follow a wave of precautionary shutdowns in Europe and the US as developers of PHP started releasing urgent fixes on Wednesday, when US and UK authorities disclosed the weaknesses."}],[{"start":37.12,"text":"Security services worldwide, including the National Security Agency and Europe’s cyber security body, have warned companies to take immediate action. Some government websites have been taken offline in a bid to protect systems."}],[{"start":50.32,"text":"PHP — originally an abbreviation of Personal Home Page — has been found to contain two serious security issues that could make companies and organisations using the language vulnerable by allowing hackers to attack without needing to log in."}],[{"start":64.28,"text":"The flaws were uncovered with the help of OpenAI and Google models after going undetected for more than a decade, underscoring how AI has set off an arms race between hackers and companies."}],[{"start":75.32,"text":"Japan’s Prime Minister Sanae Takaichi on Wednesday night called on companies to install the fixes as quickly as possible and consider suspending services if necessary."}],[{"start":85.58,"text":"“If it is difficult to apply the patches promptly, temporarily shutting down websites or other services may also be an effective way to reduce the risk,” she said in a social media post."}],[{"start":96.86,"text":"Cybersecurity agencies across Asia, including in Taiwan, Hong Kong and Singapore, have also issued warnings and advice. In Europe, countries including Finland, France and the Netherlands on Wednesday took some government services offline as a precautionary measure."}],[{"start":113.04,"text":"South Korea raised its cyber-crisis alert level for the private sector on Thursday and convened an emergency meeting attended by officials from the ministries of National Defense and Science and ICT as well as the National Intelligence Service."}],[{"start":127.36,"text":"The PHP vulnerabilities were discovered by researchers at two US cyber security groups, Calif and Wiz. Alphabet-owned Wiz estimated the compromised programming language powered about 70 per cent of all websites. WordPress, the most widely used website-building platform, is written primarily in PHP."}],[{"start":143.64,"text":"Amazon said it had identified an attempt by hackers to exploit the bug four days before the weakness was disclosed to the public and that the flaws were “now being broadly exploited in the wild”."}],[{"start":156.7,"text":"Online security company Cloudflare said on Thursday that since the weakness had been made public, it had detected “millions” of attempts to exploit it."}],[{"start":165.32,"text":"The Australian Signals Directorate issued a warning late on Wednesday urging businesses and internet users to update security patches. However, the PHP problem led to some government websites becoming unavailable."}],[{"start":179.04,"text":"Alibaba Cloud and Tencent Cloud issued warnings on Wednesday night and asked clients to update to the latest debugged version of PHP as soon as possible."}],[{"start":188.92,"text":"Wikipedia said users might experience outages. “We have deliberately taken many of our supporting services offline until they can be safely patched,” it said."}],[{"start":199.14,"text":"A slew of Japanese companies suspended services as a precaution."}],[{"start":203.74,"text":"The airline ANA said on Wednesday that it had suspended its website and app services including Apple Wallet boarding passes as a “preventive measure”."}],[{"start":212.96,"text":"Japanese financial groups, from regional lenders to a subsidiary of brokerage Nomura and megabank Mitsubishi UFJ Financial, have suspended some non-core services. MUFJ said the suspension did not affect payments."}],[{"start":227.04,"text":"Asahi Group, Japan’s largest brewer, confirmed a precautionary suspension of some websites and systems, while railways were also affected, with Keihan Holdings suspending its website. Gaming groups Sega and Bandai Namco said they were conducting emergency maintenance on parts of their websites."}],[{"start":245.08,"text":"Japan has already said it is facing a “state of emergency in cyber space” due to a recent spate of hackings."}],[{"start":251.92,"text":"Rashina Hoda, an academic at Monash University in Melbourne, said: “While major banks and companies typically do not rely on PHP for sensitive transactions, other businesses that depend heavily on providers such as WordPress for their websites, which in turn leverage PHP, are particularly vulnerable and will need to secure their services.”"}],[{"start":272.04,"text":"Hoda also warned of a possible surge in scams and phishing attacks."}],[{"start":281.09,"text":""}]],"url":"https://audio.ftcn.net.cn/album/a_1792661897_8736.mp3"}